Contents

List of Tables

Title and Copyright Information

Preface

• Who Should Use This Book
• Before You Read This Book
• How This Book Is Organized
• Examples Used in This Guide
• Oracle Directory Server Enterprise Edition Documentation Set
• Related Reading
• Redistributable Files
• Default Paths and Command Locations
• Typographic Conventions
• Shell Prompts in Command Examples
• Symbol Conventions
• Documentation, Support, and Training
• Oracle Software Resources
• Documentation Accessibility

1 Overview of Troubleshooting Directory Server Enterprise Edition

• 1.1 Defining the Scope of Your Problem
• 1.2 Collecting Generic Data
• 1.3 Using Troubleshooting Tools
  • 1.3.1 Using the idsktune Command
  • 1.3.2 Using the pkgapp Script on Solaris
  • 1.3.3 Using the dirtracer Script

2 Troubleshooting Installation and Migration Problems

• 2.1 Possible Causes of an Installation Problem
• 2.2 Troubleshooting Migration Problems

3 Troubleshooting Replication

• 3.1 Analyzing Replication Problems
  • 3.1.1 Overview of Replication Data Collection
    • 3.1.1.1 Setting the Replication Logging Level
    • 3.1.1.2 Using the insync Command
    • 3.1.1.3 Using the repldisc Command
    • 3.1.1.4 Example: Troubleshooting a Replication Problem Using RUVs and CSNs
    • 3.1.1.5 Possible Symptoms of a Replication Problem and How to Proceed
• 3.2 Troubleshooting a Replication Halt or Replication Divergence
  • 3.2.1 Possible Causes of a Replication Halt
  • 3.2.2 Possible Causes of a Replication Divergence
  • 3.2.3 Collecting Data About a Replication Halt or Replication Divergence
    • 3.2.3.1 Collecting Error and Change Logs
    • 3.2.3.2 Collecting Data Using the insync and repldisc Commands
    • 3.2.3.3 Collecting Information About the Network and Disk Usage
  • 3.2.4 Analyzing Replication Halt Data
    • 3.2.4.1 Resolving a Problem With the Schema
  • 3.2.5 Analyzing Replication Divergence Data
  • 3.2.6 Advanced Topic: Using the replcheck Tool to Diagnose and Repair Replication Halts
    • 3.2.6.1 Diagnosing Problems with replcheck
    • 3.2.6.2 Repairing Replication Failures With replcheck
  • 3.2.7 Troubleshooting Replication Problems
    • 3.2.7.1 Using the nsds50ruv Attribute to Troubleshoot 5.2 Replication Problems
    • 3.2.7.2 Using the nsds50ruv and ds6ruv Attributes to Troubleshoot Replication Problems
• 3.3 Reinitializing a Topology
  • 3.3.1 Determining What to Reinitialize
  • 3.3.2 Doing a Clean Reinitialization
    • 3.3.2.1 To Create Clean Master Data in Directory Server
  • 3.3.3 To Reinitialize a Suffix Using the DSCC

4 Troubleshooting Directory Proxy Server

• 4.1 Collecting Generic Directory Proxy Server Data
  • 4.1.1 Collecting Version Information for Directory Proxy Server
  • 4.1.2 Running the dpadm Command in Verbose Mode
  • 4.1.3 Collecting Directory Proxy Server Configuration Information
  • 4.1.4 Collecting Directory Proxy Server Log Information
• 4.2 Troubleshooting Problems With the Directory Proxy Server Process
  • 4.2.1 Overview of Process Troubleshooting Tools
    • 4.2.1.1 Using Java Tools With Directory Proxy Server 11g Release 1 (11.1.1.6.0)
    • 4.2.1.2 Using Solaris Tools With Directory Proxy Server
  • 4.2.2 Troubleshooting a Hung or Unresponsive Directory Proxy Server Process
    • 4.2.2.1 Collecting Data About a Directory Proxy Server 11g Release 1 (11.1.1.6.0) Hang on Solaris
  • 4.2.3 Troubleshooting Directory Proxy Server for Refused Connections
• 4.3 Troubleshooting Directory Proxy Server Using Data Under cn=monitor

5 Troubleshooting Directory Server Problems

• 5.1 Troubleshooting a Crash
  • 5.1.1 Possible Causes of a Crash
  • 5.1.2 Collecting Data About a Crash
    • 5.1.2.1 Generating a Core File
    • 5.1.2.2 Getting the Core and Shared Libraries
    • 5.1.2.3 Additional Information
  • 5.1.3 Analyzing Crash Data
    • 5.1.3.1 Examining a Core File on Solaris
• 5.2 Troubleshooting an Unresponsive Process
  • 5.2.1 Symptoms of an Unresponsive Process
  • 5.2.2 Collecting Data About an Unresponsive Process
  • 5.2.3 Analyzing Data About a Unresponsive Process: an Example
  • 5.2.4 Troubleshooting Drops in Performance
    • 5.2.4.1 Possible Causes of a Drop in Performance
    • 5.2.4.2 Collecting Data About a Drop in Performance
    • 5.2.4.3 Analyzing Data Collected About a Performance Problem
  • 5.2.5 Troubleshooting Process Hangs
    • 5.2.5.1 Troubleshooting an Active Hang
    • 5.2.5.2 Troubleshooting a Passive Hang
• 5.3 Troubleshooting Database Problems
  • 5.3.1 Possible Causes of Database Problems
  • 5.3.2 To Troubleshoot a Database Problem
• 5.4 Troubleshooting Memory Leaks
  • 5.4.1 Possible Causes of a Memory Leak
  • 5.4.2 Collecting Data About a Memory Leak
  • 5.4.3 Analyzing Memory Leaks Using the libumem Library

6 Troubleshooting Data Management Problems

• 6.1 Troubleshooting LDAP Operation Failures
  • 6.1.1 Possible Causes of an Operation Failure
  • 6.1.2 Collecting and Analyzing Data About Operation Failures
• 6.2 Troubleshooting SSL Problems
  • 6.2.1 Overview of Important SSL Concepts
  • 6.2.2 Possible Causes of SSL Problems
  • 6.2.3 Collecting and Analyzing SSL Data
    • 6.2.3.1 About the ssltap Tool
    • 6.2.3.2 Verifying the Certificates Using dsadm
    • 6.2.3.3 Checking Client Authentication Settings
    • 6.2.3.4 Checking the Libraries
    • 6.2.3.5 Verify SSL Communications Using the ssltap Tool

7 Troubleshooting Identity Synchronization for Windows

• 7.1 General Troubleshooting Guidelines
  • 7.1.1 Configuring and Using the Logs
  • 7.1.2 Using the idsync printstat Command
    • 7.1.2.1 Troubleshooting Quick Checklist
  • 7.1.3 Troubleshooting Problems with Identity Synchronization for Windows Installation
• 7.2 Troubleshooting Memory Problems
• 7.3 Troubleshooting Problems With Connectors
  • 7.3.1 General Connector Troubleshooting Tips
  • 7.3.2 Determining the ID of a Connector Managing a Directory Source
  • 7.3.3 Getting and Managing the Current State of a Connector
    • 7.3.3.1 Troubleshooting a Connector in the UNINSTALLED State
    • 7.3.3.2 Troubleshooting a Connector in the INSTALLED State
    • 7.3.3.3 Troubleshooting a Connector in the READY State
    • 7.3.3.4 Troubleshooting a Connector in the SYNCING State
  • 7.3.4 Troubleshooting Problems With the Active Directory Connector
• 7.4 Troubleshooting the Watchdog Process and Core Components
  • 7.4.1 Troubleshooting Processes on Solaris or Linux
  • 7.4.2 Troubleshooting Processes on Windows
  • 7.4.3 Examining the WatchList.properties File
    • 7.4.3.1 To View Hidden Folders and the Temp Subdirectory on Windows
• 7.5 Troubleshooting the Connector Subcomponents
  • 7.5.1 Verifying Subcomponent Installation
    • 7.5.1.1 To Turn on the Windows NT Audit Log
  • 7.5.2 Verifying Server Restart After Installation
  • 7.5.3 Verifying Network Connections
• 7.6 Troubleshooting the Message Queue Component
  • 7.6.1 Using telnet to Verify That the Message Queue Broker is Running
  • 7.6.2 Collecting Additional Information About the Message Queue Broker
  • 7.6.3 Troubleshooting Communication Problems With Directory Server
  • 7.6.4 Troubleshooting Memory Problems
  • 7.6.5 To Recover From a Message Queue Broker Low Memory Condition
• 7.7 Troubleshooting Problems With Identity Synchronization for Windows Over SSL
  • 7.7.1 Troubleshooting Problems With SSL Between Core Components
  • 7.7.2 Troubleshooting Problems With SSL Between Connectors and Directory Server or Active Directory
  • 7.7.3 Troubleshooting Problems With SSL Between the Directory Server and Active Directory
  • 7.7.4 Troubleshooting Problems With Certificates
    • 7.7.4.1 Untrusted Certificates
    • 7.7.4.2 Mismatched Hostnames
    • 7.7.4.3 Expired Certificates
• 7.8 Troubleshooting Active Directory Domain Controller Problems

8 Troubleshooting DSCC Problems

• 8.1 Collecting DSCC Troubleshooting Data
  • 8.1.1 To Collect DSCC Troubleshooting Data

9 Directory Server Error Log Message Reference

• 9.1 Common Error Codes
• 9.2 Common Warning Codes
• 9.3 Verifying Plug-In Signatures
  • 9.3.1 To Force Directory Server to Verify Plug-Ins are Signed
  • 9.3.2 To Force Directory Server to Validate Plug-In Signatures

10 Directory Proxy Server Error Log Message Reference

• 10.1 Common Administrative Alert Codes
• 10.2 Common Error Messages

Index