Removing eDirectory Notes

Remove a Server from the Tree

Basic Procedure for Removing a Server

To remove a server from the tree, do the following:

1. Use iMonitor, DSREPAIR, or server documentation to check for master replicas on the server to be removed.
2. Use iMonitor, DSREPAIR, or server documentation to see if the server to be removed is a single default time server type.
3. Load NWCONFIG.
4. Select Directory Options.
5. Select Remove Directory Services.
6. Authenticate as a user with supervisor rights. eDirectory is removed from the server.
7. Verify that the server has been removed from the tree.
8. Remove all objects associated with the server:

• PS-server name (predicate stats)
• SSL
• SAS
• Volumes
• LDAP

Use the –DSREMOVE Switch with NWCONFIG

If there are certain errors, you cannot remove eDirectory from a server using the normal method. Instead, you must use the –DSREMOVE switch.

This switch removed eDirectory from a server without entering a password and without being stopped by errors. First try and remove eDirectory gracefully, using the standard NWCONFIG menu options. If there are errors, try to fix the errors; then try again to remove eDirectory gracefully.

Using –DSREMOVE bypasses the synchronization process and built-in error checks. Using –DSREMOVE is dangerous, you can break the tree or accidentally leave a replica ring without a master.

This can be summarized :

1. It does not verify that a partition replica exists for that portion of eDirectory before removing it.
2. It does not synchronize changes to replica partitions before removing eDirectory.
3. It bypasses all errors that would normally prevent removing eDirectory from as a server, making it possible to create more problems in an unhealthy tree.
4. It does not require an administrator user name and password.
5. File system rights are most likely lost.
6. It might not cleanly remove the server and server object from all replica rings.

Uninstall eDirectory from Linux

Enter:
ndsconfig rm –a admin_name

Uninstall eDirectory from Windows

There are 3 ways to uninstall eDirectory from a Windows server:

1. Control Panel
2. NDS Services
3. Manual Uninstall

Control Panel
Go to Start/Control Panel/Add & Remove Programs, select NDS eDirectory and select Add/Remove.

NDS Services
Under NDS Services, start Install.dlm. Select Remove eDirectory Services from This Server.

Manual Uninstall
Using the Add/Remove facility may fail for servers that do not have a replica. If it does fail, use the following method for removal:

1. From the Windows NT/2000 Services program, stop the NDS server service and the W32 SMDR service.
2. Using Task Manager, make sure the DHost.exe program terminates.
3. Shut down the NDS Console application if it is running.
4. Using ConsoleOne, remove all the server-specific objects (Server,Server-PS,LDAP Server,LDAP Group,SAS service,SSL CeritificateIP, and possibly SSL CertificateDNS).
5. In the Windows NT/2000 registry, delete the following entries if they exist:

• HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NDSonNT
• HKLM\SOFTWARE\Novell\NDSonNT – 0
• HKLM\SOFTWARE\Novell\Portable SMDR
• HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\NDS Server
• HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\W32 SMDR
• HKLM\SYSTEM\CurrentControlSet\Services\NDS Server0
• HKLM\SYSTEM\CurrentControlSet\Services\W32 SMDR

6. Delete the following files:

All files in the directory where you installed eDirectory (for example C:\NOVELL\NDS)
The systemDrive:\Program Files\Common Files\Novell\NI\data\ip.db file
The systemRoot\system32\Novell\NICT\nicisdi.key file
The following files in the systemRoot\system32 directory: gc080352.dll,ldapsdk.dll,ldapssl.dll,ldapx.dll,NDScps.cpl,nssl.dll, and sal.dll.

7. Restart the NICI driver by typing net stop niciccs then net start niciccs.
8. Remove the server from the replica rings on each of the servers that are in the ring where the server used to reside.