Novell is now a part of Micro Focus

My Favorites


Please to see your favorites.

NCP trustee database will not sync

This document (7010684) is provided subject to the disclaimer at the end of this document.


Novell Open Enterprise Server 2 (OES 2) Linux Support Pack 3
Novell Open Enterprise Server 11 (OES 11) Linux


ncpcon nss verify=<volumename> returns inconsistencies between NSS trustees and NCP trustees.


These reported errors are cosmetic and don't affect the actual trustee being enforced.  It has been fixed but is not yet in the patch channel.  If you are interested in applying this fix on top of the OES2SP3 July 2012 maintenance update, please contact Novell Support. 


There are 3 cases that were not being handled properly.
1. Any directory names in the trustee path or eDirectory users or groups with special characters will show differences.  Special characters would include "&" and apostrophe's " ' "
NCP maps these as &amp; and &apos; which will be shown in the ncpcon nss verify output.
2. Any trustee assignments which don't have any rights assigned.
3. Any trustee assignments still there for deleted users.  These will show up in the verify log as "Unknown(21350"


This Support Knowledgebase provides a valuable tool for NetIQ/Novell/SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.

  • Document ID:7010684
  • Creation Date:24-AUG-12
  • Modified Date:24-AUG-12
    • NovellOpen Enterprise Server

Did this document solve your problem? Provide Feedback