Warning messages appear in CA Directory DSA logs when the Policy Server starts

Document ID : KB000016444
Last Modified Date : 14/02/2018
Show Technical Document Details
Question:

I have configured a new DSA in CA Directory for Policy Store, and when I start the Policy Server I see the following warning messages:

[34] 20171108.125132.438 WARN : LDAP: invalid oid: dominoOrganization
[76] 20171108.125132.438 WARN : LDAP: invalid oid: ndsLoginProperties
[104] 20171108.125132.438 WARN : LDAP: Unknown attribute type: version
[84] 20171108.125132.438 WARN : LDAP: Unknown attribute type: supportedCapabilities
[16] 20171108.125132.438 WARN : LDAP: invalid oid: domainDNS
[92] 20171108.125132.438 WARN : LDAP: invalid oid: eTNamespace
[104] 20171108.125133.155 WARN : LDAP: invalid oid: group
[104] 20171108.125216.271 WARN : LDAP: invalid oid: group 
 

What is the cause of these warnings? There is something misconfigured?

 

 

 

Answer:

These warning messages are logged when CA Directory cannot find any attributes/objects in the DSA. The invalid OID message appears because the DSA does not have the schema definitions for the objects listed, and the Unknown attribute type messages appear as the attributes are missing as well. This is a common warning message in CA Directory.

This happens as the Policy Server does an anonymous bind to the DSA searching for these SunONE related attributes when contacting the directory, and they can be safely ignored.