Cool Solutions

Common Proxy Repair Script for OES2018, OES2015, and OES11


August 1, 2017 3:13 pm





Download common-proxy-fix-1.4.tbz

Download common-proxy-fix-1.3.tbz


I recommend running this script if you have services that are failing to start due to authentication, or if you suspect an issue with the Common Proxy User, such as missing user or incorrect password.


The Common Proxy Repair script checks and fixes all aspects of the Common Proxy user including:

  • Common Proxy user is set in /etc/opt/novell/proxymgmt/proxy_users.conf
  • Common Proxy credentials are set in CASA
  • Common Proxy credentials for OES services (stored in CASA or file)
  • Common Proxy User exists in edir
  • Common Proxy User does not have Intruder Lockout
  • Common Proxy Universal Password Policy exists
  • Common Proxy User is assigned to Common Proxy UP Policy
  • Proxy user setting in /etc/sysconfig/novell/ files
  • script is in crontab

Executing this script on a working system is not harmful as long as the correct user is selected/specified.

See /var/log/common-proxy-fix.log for debug messages


Usage: -u ADMIN_DN [options]
 -u ADMIN_DN       Admin username in LDAP syntax (required)
 -w ADMIN_PASS     Admin password
 -h LDAPS_IP       LDAPS IP, default is
 -p LDAPS_PORT     LDAPS port, default is 636
 -f SERVICE_LIST   Comma separated list of services to force config for CASA
 Example: -u cn=admin,o=org
 Example: -u cn=admin,o=org -w P@ssw0rd
 Example: -u cn=admin,o=org -h -p 1636
 Example: -u cn=admin,o=org -f cifs,dns,dhcp

Sample Output:

pluto:~ # -u cn=admin,o=mf

Logging to /var/log/common-proxy-fix.log . . .

Enter password for cn=admin,o=mf:
Verifying authentication for ADMIN_DN....SUCCESS

Retrieving Common Proxy username and,ou=servers,o=mf
Retrieving CIFS username and,o=mf
Retrieving AFP username and,ou=servers,o=mf
Retrieving DNS username and,ou=servers,o=mf
Retrieving DHCP username and password............FAILURE
Retrieving LUM username and,ou=servers,o=mf

/etc/opt/novell/proxymgmt/proxy_users.conf is empty

1) Default Common Proxy User: cn=OESCommonProxy_pluto,ou=servers,o=mf (in eDir)
2) Common Proxy set in CASA:  cn=OESCommonProxy_pluto,ou=servers,o=mf (in eDir)
3) Common Proxy set in CONF: 
4) Enter Common Proxy Username

   Select the correct CP Username (1/2/3/4/q): 2

Checking Common Proxy UP Policy....SUCCESS
Verifying authentication with the existing common proxy password....SUCCESS
Assigning Common Proxy User to Common_Proxy_Policy....SUCCESS
Adding user to /etc/opt/novell/proxymgmt/proxy_users.conf....SUCCESS
Checking Crontab for

Setting credentials for cifs....username does not match

Setting credentials for afp....ALREADY SET

Setting credentials for dns....ALREADY SET

dhcp is installed, but credentials were not found.
Force dhcp credentials into CASA using CASAcli? (y/n): y
Forcing CASA credentials for dhcp using CASAcli....SUCCESS

Not setting credentials for ifolder....not installed

Not setting credentials for netstorage....not installed

Not setting credentials for ncs....not installed

Setting credentials for lum....ALREADY SET

Log File: /var/log/common-proxy-fix.log


Version 1.4

  1. Improved the common proxy user selection interface
  2. A few other minor improvements

Version 1.3

  1. Fixed a small issue with the Default Common Proxy Name
  2. Added additional handling for /etc/sysconfig/novell/ files

Version 1.2

  1. The proxy user is now updated in the files in /etc/sysconfig/novell/
  2. Added additional checking for the common proxy user in eDirectory

Version 1.1

  1. Added checking for Intruder Lockout
  2. Added additional checking for Common Proxy UP Policy


2 votes, average: 5.00 out of 52 votes, average: 5.00 out of 52 votes, average: 5.00 out of 52 votes, average: 5.00 out of 52 votes, average: 5.00 out of 5 (2 votes, average: 5.00 out of 5)
You need to be a registered member to rate this post.

Tags: , , , , , , , , , , ,
Categories: Cool Tools, File Services and Management, IT Operations Management, Open Enterprise Server, Technical

Disclaimer: This content is not supported by Micro Focus. It was contributed by a community member and is published "as is." It seems to have worked for at least one person, and might work for you. But please be sure to test it thoroughly before using it in a production environment.