EIM problem determination

When troubleshooting EIM, consider the following tips.

Consider the following when you are having problems with EIM:

  • If the nfsrgyd or chnfsim commands are unable to connect to the EIM LDAP server, ensure the ibmslapd process is running on the EIM LDAP server by typing the following command:
    ps -ef | grep ibmslapd
    
    If the ibmslapd process is not running, type the following command to activate it:
    /usr/sbin/ibmslapd
  • If the nfsrgyd or chnfsim commands are able to connect to the EIM LDAP server but are unable to perform any identity mapping operations, ensure the ibmslapd process is not running in configuration-only mode.
    This can happen if the ldapdb2 database is not running when the ibmslapd server is started. Follow these steps:
    1. Log in to the EIM LDAP server as the root user.
    2. View the /var/ldap/ibmslapd.log file. Check when the last time the ibmslapd process started. Also check whether the server was started in configuration-only mode because it couldn't connect to the ldapdb2 database.
    If the server was not able to connect to the ldapdb2 database, the database needs to be started. Follow these steps to start the ldapdb2 database:
    1. Log into the EIM LDAP server as the root user.
    2. Type the following command to check if the ibmslapd process is active:
      ps -ef | grep ibmslapd
      If it is active, disable it by running the following command:
      kill ibmslapd pid
      where pid is the process ID that was returned from the ps -ef command.
    3. After the ibmslapd process is disabled, start the ldapdb2 database:
      1. Log in to the EIM LDAP server as the ldapdb2 user.
      2. Type db2start.
    4. After the ldapdb2 database is started, activate the ibmslapd process:
      1. Log in to the EIM LDAP server as the root user.
      2. Type ibmslapd.