Error in /var/log/messages "kernel: Unable to find .USER.CONTEXT. to get the GUID."
This document (7007392) is provided subject to the disclaimer at the end of this document.
When an eDirectory user is deleted NSS receives a delete event containing the FQDN of the user. NSS takes this deleted user's name and clears the user from the object store. When NSS later tries to retrieve owner information for this FQDN and doesn't find it in the object store it assigns "nobody" as the owner of the file or folder.
In this case what seems to have happened is that when the eDirectory object was deleted NSS didn't receive or didn't process the event and the FQDN was left in the object store. The result is that NSS expects to be able to resolve the FQDN<->GUID mapping from eDirectory (which it obviously can't because the user no longer exists).
Run these three commands in "nsscon" to dump the caches and allow the object stores to be rebuilt.
host:~ # nsscon
host> nss /resetObjectIDStore=all
host> nss /removeObjectIDStore=all
host> nss /forcebackgroundcheck
The "all" directive runs the command against all NSS volumes. If you are able to narrow the problem to a single volume you can alternately specify just that volume name.
These commands clear the ObjectID Store (GUID to FDN) cache and will be built again as users start accessing the file system. So the side effect, if any, is like rebooting the machine as far as this cache is concerned. Other NSS caches will not be affected. This problem also does not immediately remove or reset file ownership information in the persistent object store for the files owned by the now-deleted eDirectory users - the regular NSS processes will eventually reset the ownership to "nobody" using the process mentioned above.
Update - Dec 4, 2013
November 2013 OES11 versions have a Scheduled Maintenance Update that includes this fix.
This Support Knowledgebase provides a valuable tool for NetIQ/Novell/SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.
- Document ID:7007392
- Creation Date:17-DEC-10
- Modified Date:04-DEC-13
- NovellOpen Enterprise Server
Did this document solve your problem? Provide Feedback