DELEGATED ADMINISTRATOR PROBLEMS

I am running JES2005Q4 which has been working very okay. I use DA to create email domains/organizations. I have about 40 organizations running on it.

The problems began when I tried creating a subdomain and got some error. Now when i try to create a new organization i getUnable to create dc tree

I enable debugging for the DA and i got the following from the debug logs

TRACE [Fri Feb 02 14:32:02 EAT 2007] Validating value barua.jambo.co.ke: PASSED

ERROR [Fri Feb 02 14:32:02 EAT 2007] ResourceSet:getString():Unable to resolve validateAttr-mailclientattachment

quota

ERROR [Fri Feb 02 14:32:02 EAT 2007] ResourceSet:getString():Unable to resolve validateAttr-maildomaindiskquota

ERROR [Fri Feb 02 14:32:02 EAT 2007] ResourceSet:getString():Unable to resolve validateAttr-preferredlanguage

TRACE [Fri Feb 02 14:32:03 EAT 2007] ServerPushThread: setting stop flag

TRACE [Fri Feb 02 14:32:03 EAT 2007] commTaskManager: progress thread stopped

TRACE [Fri Feb 02 14:32:03 EAT 2007] com.iplanet.am.sdk.AMException: Unable to create dc tree.

at com.iplanet.am.sdk.ldap.DCTree.createDomain(DCTree.java:195)

at com.iplanet.am.sdk.ldap.DirectoryManager.createOrganization(DirectoryManager.ja va:1204)

at com.iplanet.am.sdk.ldap.DirectoryManager.createEntry(DirectoryManager.java:1532 )

at com.iplanet.am.sdk.AMDirectoryManager.createEntry(AMDirectoryManager.java:651)

at com.iplanet.am.sdk.AMCacheManager.createEntry(AMCacheManager.java:337)

at com.iplanet.am.sdk.AMObjectImpl.create(AMObjectImpl.java:1009)

at com.iplanet.am.sdk.AMOrganizationImpl.createSubOrganizations(AMOrganizationImpl .java:137)

at sun.comm.cli.server.servlet.CreateBusinessOrg.create(CreateBusinessOrg.java:116 )

at sun.comm.cli.server.servlet.CreateBusinessOrg.doTask(CreateBusinessOrg.java:67)

at sun.comm.cli.server.servlet.commTaskManager.execute(commTaskManager.java:196)

at sun.comm.cli.server.servlet.commServlet.doPost(commServlet.java:90)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:807)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:908)

at org.apache.catalina.core.StandardWrapperValve.invokeServletService(StandardWrap perValve.java:771)

at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java: 322)

at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:509)

at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java: 212)

at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:509)

at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:209)

at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:509)

at com.iplanet.ias.web.connector.nsapi.NSAPIProcessor.process(NSAPIProcessor.java: 161)

at com.iplanet.ias.web.WebContainer.service(WebContainer.java:580)

TRACE [Fri Feb 02 14:32:03 EAT 2007] After AM Exception , msg being sent is Unable to create dc tree.^344^NONE

TRACE [Fri Feb 02 14:32:03 EAT 2007] in CLIPageData constructor:status = 1

TRACE [Fri Feb 02 14:32:03 EAT 2007] commTaskManager - execute => generateOutput

TRACE [Fri Feb 02 14:32:03 EAT 2007] In CLIPageGenerator ....

TRACE [Fri Feb 02 14:32:03 EAT 2007] CLIPageGenerator - generateOutput : cliData.status = 1

Anybody with an idea on what could be wrong.

[3506 byte] By [Muhiaa] at [2007-11-26 17:05:59]
# 1

Creating a sub-domain isn't something DA knows how to do. It likely gave you a "domain is not disjoint" kind of error.

You might want to examine your ldap access log for the time when you tried, and see what error the ldap server gave DA.

This, of course, begs the question, "why are you trying to create a subdomain anyway?"

jay_plesseta at 2007-7-8 23:33:46 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 2
True when I tried creating the sub domain I got that error. So I cancelled the operation. Now when I try to create another domain i get the error Unable to create dc tree. Which I cannot figure out what it means. Any idea on why I get this error and what does it mean
Muhiaa at 2007-7-8 23:33:46 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 3
Hm. DC tree. That sounds like Schema 1. Which sounds like iDA, not DA.What version Messaging? What schema?have you looked at your ldap access log, yet?If schema 1, you already have a dc tree. Unless somehow you removed it. If so, then your server is down......
jay_plesseta at 2007-7-8 23:33:46 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 4

Sun Java(tm) System Messaging Server 6.2-3.04 (built Jul 15 2005)

libimta.so 6.2-3.04 (built 01:43:03, Jul 15 2005)

Schema Version 2 (at least thats what I selected when doing directory preparation) is there another way to verify the Schema and no the server is not down coz I am able to log in and create users on existing domains.

Yep I looked at my access log for LDAP and here is the section at that time

[01/Feb/2007:20:06:40 +0300] conn=290187 op=2265 msgId=2640 - SRCH base="dc=jambo,dc=co,dc=ke" scope=2 filter="(

&(!(objectClass=sunRealmService))(|(o=iis.aja.co.ke)(o=iis.aja.co.ke)(sunPr eferredDomain=iis.aja.co.ke)(associat

edDomain=iis.aja.co.ke)(sunOrganizationAlias=iis.aja.co.ke)))" attrs="*" authzid="dn:cn=dsameuser,ou=DSAME Users

,dc=jambo,dc=co,dc=ke"

[01/Feb/2007:20:06:40 +0300] conn=290187 op=2265 msgId=2640 - RESULT err=0 tag=101 nentries=0 etime=0

[01/Feb/2007:20:06:40 +0300] conn=290187 op=2266 msgId=2641 - SRCH base="o=business,dc=jambo,dc=co,dc=ke" scope=

0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs="objectClass" authzid="dn:cn=dsameuser,ou=DSAME Us

ers,dc=jambo,dc=co,dc=ke"

[01/Feb/2007:20:06:40 +0300] conn=290187 op=2266 msgId=2641 - RESULT err=0 tag=101 nentries=1 etime=0

[01/Feb/2007:20:06:40 +0300] conn=290187 op=2267 msgId=2642 - SRCH base="o=business,dc=jambo,dc=co,dc=ke" scope=

0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL authzid="dn:cn=dsameuser,ou=DSAME Users,dc=jam

bo,dc=co,dc=ke"

[01/Feb/2007:20:06:40 +0300] conn=290187 op=2267 msgId=2642 - RESULT err=0 tag=101 nentries=1 etime=0

[01/Feb/2007:20:06:40 +0300] conn=290187 op=2268 msgId=2643 - SRCH base="dc=jambo,dc=co,dc=ke" scope=0 filter="(

|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL authzid="dn:cn=dsameuser,ou=DSAME Users,dc=jambo,dc=co,dc

=ke"

[01/Feb/2007:20:06:40 +0300] conn=290187 op=2268 msgId=2643 - RESULT err=0 tag=101 nentries=1 etime=0

[01/Feb/2007:20:06:40 +0300] conn=290187 op=2269 msgId=2644 - SRCH base="dc=jambo,dc=co,dc=ke" scope=0 filter="(

|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL authzid="dn:cn=dsameuser,ou=DSAME Users,dc=jambo,dc=co,dc

=ke"

[01/Feb/2007:20:06:40 +0300] conn=290187 op=2269 msgId=2644 - RESULT err=0 tag=101 nentries=1 etime=0

[01/Feb/2007:20:06:40 +0300] conn=290187 op=2270 msgId=2645 - SRCH base="dc=jambo,dc=co,dc=ke" scope=2 filter="(

inetDomainBaseDN=o=business,dc=jambo,dc=co,dc=ke)" attrs="objectClass objectClass" authzid="dn:cn=dsameuser,ou=D

SAME Users,dc=jambo,dc=co,dc=ke"

[01/Feb/2007:20:06:40 +0300] conn=290187 op=2270 msgId=2645 - RESULT err=0 tag=101 nentries=0 etime=0

[01/Feb/2007:20:06:40 +0300] conn=290187 op=2271 msgId=2646 - SRCH base="o=business,dc=jambo,dc=co,dc=ke" scope=

0 filter="(|(objectClass=sunismanagedorganization)(objectClass=iplanet-am-managed -org-unit))" attrs="*" authzid=

"dn:cn=dsameuser,ou=DSAME Users,dc=jambo,dc=co,dc=ke"

Muhiaa at 2007-7-8 23:33:46 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 5
Do you have a backup of your Directory from before you tried to add the subdomain? Of any kind?If so, and if it's an ldaif file, you might want to compare your current structure with what you had before.
jay_plesseta at 2007-7-8 23:33:46 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 6
Nope no backup. Is there an ldif file i should look for
Muhiaa at 2007-7-8 23:33:46 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...