Failed to Configured Domain Services for Windows

Question

Hi!
I am installing OES 2 SP3 with DSfW Pattern as a "New Domain Controller in an Existing Domain Services for Windows Domain" with Replication Configuration and Schema Partition.
During the "Perform eDirectory Configuration" at last task "Configure Domain Services for Windows " at 93% we encountered an error: "Failed to configure Domain Services for Windows".
Here's details of error ;
command : perl /opt/novell/xad/sbin/ndsdcinit.pl retry full-replica -d 'vec.apd.com.ph' -l 'ou=OESSystemObjects,dc=vec,dc=apd,dc=com,dc=ph'
-g 'ou=OESSystemObjects,dc=vec,dc=apd,dc=com,dc=ph' -f 'apd.com.ph' -p 'apd.com.ph' -o 192.168.81.92 -t
Could not create gss directory /etc/opt/novell/xad/gss at /opt/novell/xad/sbin/ndsdcinit.pl line 463, line 652
LDAP Based utility [ndsConfigServerContext.sh] to retrieve server context for YaST
DomainName : vec.apd.com.ph
NdsAdminName : CN=Administrator,CN=Users,DC=vec,DC=apd,DC=com,DC= ph
ExistingServerIP : ANDROMEDA.vec.apd.com.ph
ExistingServerPort : 0
Add_DC : true
Returning server context->ou=OESSystemObjects.dc=vec.dc=apd.dc=com.dc=ph
LDAP Based utility [ndsConfigServerContext.sh] to retrieve server context for YaST
DomainName : vec.apd.com.ph
NdsAdminName : CN=Administrator,CN=Users,DC=vec,DC=apd,DC=com,DC= ph
ExistingServerIP : ANDROMEDA.vec.apd.com.ph
ExistingServerPort : 0
Add_DC : true
Returning server context->ou=OESSystemObjects.dc=vec.dc=apd.dc=com.dc=ph
SASL/GSS-SPNEGO authentication started
SASL SSF: 56
SASL installing layers
Failed to fetch dNIPDNSZones from DNS_LOCATOR_OBJECT at /opt/novell/xad/lib64/perl/Install/adc_install.pm line 503
at /opt/novell/xad/lib64/perl/Logger.pm line 119
Logger::_err('Failed to fetch dNIPDNSZones from DNS_LOCATOR_OBJECT at /opt/...') called at /opt/novell/xad/lib64/perl/Logger.pm line 202
Logger::Log(0, 'Failed to fetch dNIPDNSZones from DNS_LOCATOR_OBJECT at /opt/...') at /opt/novell/xad/lib64/perl/Install/adc_install.pm line 532
adc_install::decide_domain_zones() called at /opt/novell/xad/lib64/perl/install/adc_install.pm line 150
adc_install::stage_domain('adc_install=HASH (0X8b9370)') called at /opt/novell/xad/sbin/ndsdcinit.pl line 1383
main::main(62, 'apd.com.ph', 'vvec.apd.com.ph', 'TRUE','ou=OESSystemObjects,dc=vec,dc=apd,dc=com,d c=ph','ADM_PASSWD_DOMAIN','ou=OESSystemObjects,dc= vec,dc=apd,dc=com,dc=ph','replops::DESTROY',
'APD.COM.PH',...) called at /opt/novell/xad/sbin/ndsdcinit.pl line 1301
main::main() called at /opt/novell/xad/sbin/ndsdcinit.pl line 1425
ENV PATH = /opt/novell/xad/sbin:/opt/novell/xad/bin:/opt/novell/xad/share/dcinit:/opt/novell/eDirectory/bin:
LIB=lib64
LD LIBRARY PATH =
/opt/novell/xad/lib64:/opt/novell/xad/lib64/nds-
modules:/opt/novell/eDirectory/lib64:/opt/novell/eDirectory/lib64/nds-modules
SASL PATH = /opt/novell/xad/lib64/sasl2
DCINIT CONFIG: /etc/opt/novell/xad/xad.ini
DOMAIN NAME: vec.apd.com.ph
PARENT NAME: apd.com.ph
FOREST NAME: apd.com.ph
NETBIOS NAME: VEC
Any ideas on this error ?
Regards. Thanks.
denzmo

Answer 1

Thanks for the reply.
I have some followup questions
2. Can you explain the DNS setting in your setup ?
Tree ---> Power--> apd.com.ph -- dlpc.apd.com.ph
-- vec.apd.com.ph -- Andromeda.vec.apd.com.ph (DNS)
-- Pictor.vec.apd.com.ph ( additional domain server ) -> "Failed to configure in DSFW"
1. apd.com.ph, dlpc.apd.com.ph, vec.apd.com.ph are DSfW domains or just DNS domains ?
2. Andromeda.vec.apd.com.ph (DNS) - is this the DC of a DSfW domain ?
3. You are adding the Additional domain controller to the vec.apd.com.ph domain right ?
The
# LDAPCONF=/etc/opt/novell/xad/openldap/ldap.conf /usr/bin/ldapsearch -Y EXTERNAL -s sub -b dc=ph "(objectclass=dniplocator)" dn
Heres the result ;
a.) running the command in the DNS server (child domain) ANDROMEDA;
SASL /EXTERNAL authentication started
SASL username: gidNumber=0+uidNumber=0, cn=peercred,cn=external,cn=auth
SASL SSF: 0
# extended LDIF
# LDAPv3
# base <dc=ph(objectclass=dniplocator) [email protected]> with scope subtree
# filter: (objectclass=*)
# requesting:ALL
# search result
search : 2
result : 32 No such object
text : NDS error : no such entry (-601)
# numResponses :1
This is strange. This ldapsearch is failing to find the locator object in the tree under dc=ph.
- Can you try this same command from your FRD DC too and find the result ?
- Is your server non-name mapped or your adding a DSfW server into an existing eDirectory tree (name mapped) ?
- If it is later can you try the same search with '-b' parameter replaced with container to which FRD is mapped to into the eDirectory Tree.
- Can you tell in your setup where are the locator object present for your first DSfW server which is acting as DNS server ?
- While installing this ADC server, you have given the remote dns server as 192.168.81.92. In the YaST DNS screen did you do retrieve (by clicking 'retrieve' button on the screen ) or you entered those inputs manually ?
- Another follow up question. The locator context provided to the ndsdcinit command in your first post, is 'ou=OESSystemObjects,dc=vec,dc=apd,dc=com,dc=ph'. Can you confirm your locator
context is correct ?
[/QUOTE]
b.) running the command in the ADC PICTOR;
SASL /EXTERNAL authentication started
ldap_sasl_interactive_bind_s: invalid credentials (49)
[/QUOTE]
This is expected as the server is not completely configured.
Please get it touch with our NTS for passing on more information about this setup.