6.7 SNMP Issues

After upgrading from eDirectory 8.7.3 to eDirectory 8.8, you might get the following error:

%%% Attempting to restart the NetIQ eDirectory SNMP subagent (ndssnmpsa)...
Starting NDS SNMP Subagent ...
Initialization failure. Error code : -255
Please Wait...
Done

%%% Unable to start ndssnmpsa... Please try starting it manually...

This error occurs because with eDirectory 8.8, eDirectory does not listen on the localhost. Earlier the ndssnmp.cfg file had SERVER localhost set by default.

To resolve this error, you need to manually edit the ndssnmp.cfg file and include the host name of the eDirectory server, which needs to be monitored.

For example, type the following in the ndssnmp.cfg file:

SERVER test-server

test-server is the hostname on which eDirectory is running on the default NCP port (that is 524). If eDirectory is running on a different port (for ex: 1524), the entry should be as follows:

SERVER test-server:1524

The subagent can fail with the following message:

Unable to load library: libnetsnmp.so

To resolve this, export the environment variable SNMP_MAJOR_VERSION with the net-snmp library’s (libnetsnmp.so) major version number. For example, you might use the following command:

export SNMP_MAJOR_VERSION=10

When the master agent is restarted on Linux, ndssnmpsa needs to be restarted.

To restart ndssnmpsa, stop ndssnmpsa and then start it again.

To stop ndssnmpsa, enter the following command:

/etc/init.d/ndssnmpsa stop

To start ndssnmpsa, enter the following:

/etc/init.d/ndssnmpsa start

When you start ndssnmpsa on Linux, you might get the following errors:

Error: eDirectory SNMP Initialization component. Error code: -168

Error: eDirectory SNMP Initialization component. Error code: 9

To resolve this, unload and load ndssnmp using the following commands:

/opt/novell/eDirectory/bin/ndssnmp -u

/opt/novell/eDirectory/bin/ndssnmp -l

When ndssnmpsa is stopped on SLES 9, an error message similar to "*** glibc detected *** double free or corruption (!prev): 0x0819cdd0 *** " is displayed on the screen.

You can ignore these messages.

The eDirectory MIB file (<eDirectoryInstallRootDir>\snmp\edir.mib) on Windows compiles with some errors and warnings on HP OpenView. You can ignore these errors.

If LDAP is not configured to run in clear text mode, the name of the trusted root certificate file must be given in the SNMP configuration file (for example, SSLKEY C:\Novell\nds\trust.der) before bringing up the eDirectory SNMP subagent.

ndssnmp.cfg is found in C:\novell\nds\snmp on Windows.

When you install eDirectory 8.8 SP8 for the first time (creating a new tree), if the Windows SNMP Service is installed on the server, and the SNMP Service has one or more dependent services, eDirectory cannot shut down the SNMP Service. If this happens, SNMP is not ready to use after the eDirectory installation.

Follow these steps to restart the SNMP service:

While installing eDirectory on any supported Windows platform server, if you get an SNMP group object creation error, you need to manually create the SNMP group object. For information on the steps to manually create an SNMP object, refer to the “eDirectory and SNMP” section of the NetIQ eDirectory 8.8 SP8 Administration Guide.

If the Windows SNMP Service is installed on a server, and the SNMP Service has one or more dependent services, the eDirectory uninstall does not delete all the SNMP files in the C:\novell\nds folder. However, the other uninstallation processes complete successfully, including the deletion of the SNMP registry entries, and the deconfiguration process that the NetIQ SNMP agent does with DS and the SNMP Service.

To complete the uninstallation:

RHEL 7 provides NET-SNMP version 5.7.2 and installs the following versions of SSL libraries:

When NET-SNMP is loaded with a newer version, the openssl-1.0.1e-34.el7.x86_64 library causes missing of symbols and dumps the core.

To workaround this issue, perform the following actions: