Issues after Migration

[mfranco]

After having major issues with migrating from Netware 5.1 to 6.5 I am wondering. If I just bring down the Netware 6.5 server, can I just bring the 5.1 server back up in its place? Since they have the same identity, I am wondering if I can just bring back the 5.1 server and migrate it over again, this time aware of the issues that I previous had. Are there adverse affects to the DS if I do this? I assume I could just delete any objects left by the 6.5 install. Other than some file changes made, will users be aware of what is going on? Or would I be better served trying to fix the problems I am having?

 

[marvhuffaker]

Personally, I never like to go back. I think the problems can most likely be fixed. Not saying it will be easy, and I don't know your skillset.. but you may want to get some professional help to get through it with the least amount of stress and downtime.

Marvin Huffaker, MCNE

http://www.redjuju.com

 

[mfranco]

Well, from what I have been able to figure out, I think my problems are due to the fact that I can't regenerate my server key. When I type TCKEYGEN at the server console, I see an error in the Logger screen saying

Error importing certificate to keystore: sys:\adminsrv\conf\.keystore
com.novell.ecb.CommandException: Connection refused at
com.novell.ecb.security.RetrieveHostCertificates

I tried going through this TID
Tomcat 4 on NetWare 6.5 will not load - TID10087091

But it doesnt seem to work. I don't even see a .keystore file in my sys:\adminsrv\conf\ folder.

Any thoughts?

 

[marvhuffaker]

Troubleshooting it at the Tomcat Level is not going to get you anywhere. The problem is further up the PKI chain.

Your Org CA is probably broke. none of your PKI stuff can be fixed until your ORG CA is in order and then you go down from there. this includes functionality of the TCKEYGEN utility.

Lookup this TID on Novell's Knowledgebase:

http://support.novell.com/cgi-bin/search/searchtid.cgi?10094253.htm

Its where you need to start.



Marvin Huffaker, MCNE

http://www.redjuju.com

 

[mfranco]

Well I found this TID last night and with it was able to figure out the same thing. Another part of my issue was that I am only a container Admin and didn't have the rights needed to fix the PKI stuff with PKIDIAG or to use the TCKEYGEN. I was able to get a chance to talk to higher admin who (temporarily) gave me the rights I needed get things up and running. Now I'm just getting the printers up and running again.

Thanks for your help as well!