User enrollment error codes
If an error code appears, use option 16 to view the error message that
is associated with the error code. Although the message text associated with
the error appears, substitution text, such as the server name, does not. However,
when the message goes to the QNETWARE job log, the substitution text does appear.
Some error codes have a one-to-one relationship with an associated error
message. Many of the NetWare-specific messages, however, show only the NetWare error
code, then a generic message that indicates an error occurred while calling
a NetWare function. In this case, the error message has some explanatory text
for some of the common NetWare errors. Not all errors, however, are described
in the message text.
These error codes might appear:
- Negative error code
- These error codes generally indicate some sort of communication error
while trying to send requests to a NetWare server. Generally, only the final
error appears. If you know that a server is inactive, this probably explains
the error. If you think that a server is running properly, look in the QNETWARE job log for related error messages that might
help isolate the problem.
- 0-999
- Error codes returned from NetWare function calls.
- 216
- The password is too short. Change the password on iSeries™ to a longer
value.
- 220
- The account is disabled. Re-enable the QNETWARE profile on the NDS tree.
- 238
- Another object already exists with the same name as the profile that
you are propagating. Either end propagation of the profile from the iSeries side, or
rename the matching object from a NetWare client.
- 242-254
- The QNETWARE profile on the NDS tree does not have sufficient access
rights to make the necessary user or group object changes. From a NetWare client,
make sure that the QNETWARE profile has the authority to process user and group
objects. You can do this by making the object an ADMIN user or the security
equivalent to an ADMIN user.
- 333
- Indicates that a connection failure has occurred. If this error occurs,
end the QNETWARE job. Then restart it by issuing a Retry entry option from the
WRKNWSENR status display for the failing profile.
- 601
- This normally indicates that you specified an incorrect NDS context.
Check for the profile in error by looking at the NDS context field of the
CHGNWSUSRA command. If you specified *NWSA in the CHGNWSUSRA command, check
the NDS context field in the CHGNWSA command.
- 606
- Another object already exists in the NDS tree with the same name as
the profile you are propagating. Either end propagation of the profile from
the iSeries side, or rename the matching object from a NetWare client.
- 611
- You specified an incorrect container name. Check the NDS context field
for the failing group or user profile.
- 637
- You are attempting an update or delete operation to a user or group
profile that has a move in progress. Typically this means that replication
of an NDS tree has not yet completed. If the operation changes to an *UPDFAIL
or *DLTFAIL status, use the Retry entry option on the WRKNWSENR status display
for the failing profile.
- 654
- A NetWare partition is busy. If the operation goes to a status of *UPDFAIL
or *DLTFAIL before the error clears, retry the operation. Use the Retry entry
option on the WRKNWSENR status display for the failing entry.
- 668
- You specified an incorrect container name. Check the NDS context
field for the failing group or user profile.
- 669
- The password is not correct.
- 672
- The QNETWARE profile on the NDS tree does not have sufficient access
rights to make object changes to the group or user. From a NetWare client, make
sure that the QNETWARE profile has the authority to process group and user objects.
Do this by making the object an ADMIN user or the security equivalent to an
ADMIN user.
- 6000
- Occurs when trying to send a request to an NDS tree. It indicates
that the context for the QNETWARE profile in the tree cannot be determined.
To correct the error, either use the ADDNTWAUTE command to create a NetWare authentication entry for the QNETWARE profile in the tree,
or use the CHGNWSUSRA command to define such a context.
- 6001
- There is no QNETWARE profile on iSeries. Use the CRTUSRPRF command to create
the profile. This profile is automatically created when NetWare Enhanced Integration is installed,
but a system administrator might have deleted it.
- 6002
- An error occurred while trying to access the QNETWARE profile enrollment
information. The profile object is either locked by another job or damaged.
If the profile object is damaged, create the QNETWARE user profile again.
- 6003
- The user enrollment task could not contact the requested server in an NDS tree.
Either the servers are inactive, or they are not running the NetWare Enhanced Integration NLM. To
recover, start the inactive servers or load the NetWare Enhanced Integration NLM.
- 6004
- An authentication error occurred while trying to log in the QNETWARE user
to a server. Either the QNETWARE profile does not exist on the tree or server,
or the iSeries password information does not match that currently on the NetWare server
or NDS tree. Either change the iSeries password information to match the server,
or change the QNETWARE password from a NetWare utility such as NWADMIN.
- 6005
- An unexpected communication error occurred while trying to connect to
a NetWare server. Look in the QNETWARE job log for more detailed errors that might
help diagnose the problem.
- 6006
- An error occurred while trying to get the QNETWARE authentication information.
Use the ADDNTWAUTE command to add an authentication entry for the QNETWARE profile.
If one already exists, there may be some damage, so delete and re-create the QNETWARE profile.
- 6007
- An error occurred trying to retrieve user or group profile enrollment
information. Try the operation again. If the error persists, the profile may
be damaged. Either create the user profile again, or restore the profile from
a saved version.
- 6008
- An error occurred while trying to create an authentication entry for
an iSeries profile. Try the operation again. If the error persists, look
in the QNETWARE job log for any related errors that might indicate the source
of the problem.
- 6009
- An error occurred while trying to update the status of a profile on
a server. Try the operation again. If the problem persists, either delete
and then re-create the profile or restore the profile from a saved version.
- 6011
- No password is available for the user profile. This error occurs when
the QRETSVRSEC system value is set to 0, meaning that iSeries does not
keep security information. In this situation, passwords can only be retrieved
when the password is actually changed, or the user signs on to the system.
For example, this error might occur if you create a new group profile
to enroll all the group members on a NetWare server. If the QRETSVRSEC system
value is set to 0, passwords for the group members are not immediately available,
so the 6011 error appears for all the group members. If one of them signs
on to iSeries, the system automatically captures the password information and
resolves the 6011 error. Until the user signs on, or the password is changed
using the CHGPWD or CHGUSRPRF command, this profile remains in a pending state.
This error can also occur if the user password has not changed since
you set the QRETSVRSEC system value to 1. To resolve the error, either have
the user sign on to iSeries, or change the password by using the CHGPWD or
CHGUSRPRF command.
- 6012
- A profile update request was sent to a server, but no response was returned
within 10 minutes. The iSeries tries again. If the error persists for a particular
user, check the detailed error messages in the QNETWARE job log for more information.