Naming and Directory Services (DNS, NIS, and LDAP)

Problem: Object class violations occur.Cause: When the ypserv -i command is run, each NIS map is read and itscontents are written into the DIT. Several maps might contribute attributes to thesame DIT object. Generally, one map creates most of the object, including all theobject’s MUST attributes. Other maps contribute additional MAY attributes.Maps are processed in the same order that nisLDAPobjectDN attributes appear inthe NISLDAPmapping file. If maps containing MAY attributes get processed beforemaps containing MUST attributes, then object class violations occur. See Error 65 in“Common LDAP Error Messages” on page 244 for more information about thiserror.Solution: Reorder the nisLDAPobjectDN attributes so that maps are processed inthe correct order.As a temporary fix, rerun the ypserv -i command several times. Each time thecommand is executed, more of the LDAP entry is built up.Note – Mapping in such a way that all of an object’s MUST attributes cannot be createdfrom at least one map is not supported.N2L Server Timeout IssueProblem: The server times out.Cause: When the N2L server refreshes a map, the result might be a large LDAPdirectory access. If the Sun Java System Directory Server is not correctlyconfigured, this operation might time out before completion.Solution: To avoid directory server timeouts, modify the Sun Java SystemDirectory Server attributes manually or by running the idsconfig command. See“Common LDAP Error Messages” on page 244 and “NIS-to-LDAP Best PracticesWith Sun Java System Directory Server” on page 241 for details.N2L Lock File IssueProblem: The ypserv command starts but does not respond to NIS requests.Cause: The N2L server lock files are not correctly synchronizing access to the NISmaps. This should never happen.Solution: Type the following commands on the N2L server.# svcadm disable network/nis/server:default# rm /var/run/yp_maplock /var/run/yp_mapupdate# svcadm enable network/nis/server:defaultN2L Deadlock IssueProblem: The N2L server deadlocks.Chapter 15 • Transitioning From NIS to LDAP (Overview/Tasks) 247