Unable to update schema

Unable to update schema

The customer is a doing new install and can not perform wizard #2 when using Active directory.

Customer turned on com.stoneware.service.directoryManager.schema debug and got the following error: 

FATAL (04/29) 10:58:32 [com.stoneware.service.DirectoryManager.schema]: Unable to update schema. 
javax.naming.NoPermissionException: [LDAP: error code 50 - 00000005: SecErr: DSID-03151E04, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0 

This means that 
1) The tree root is not the ip number of the schema master server - this has to be set to the schema master during the initial install and then can be changed to another dc later. 
2) The user in directory services is not part of the Schema Master group 
3) The registry entry is not configured on the schema master server to allow LDAP updates.  http://support.microsoft.com/kb/216060 

    Can't find the KB

    Unable to find the KB to address your issue ?  

      • Recent Articles

      • Lenovo Unified Workspace End-of-Life Questions and Answers

        Will the shutdown of LUW servers and access to downloads affect my server licensing? No, the shutdown of the customer servers and access to the product and licensing downloads will not affect your server licensing. This license is downloaded and ...
      • How do I determine my Unified Workspace license expiration date?

        The best method for determining the licensing information including the expiration date of your Unified Workspace license: Login to your 8090 management console on each server This may take remoting into each LUW server and relay, opening a browser, ...
      • Lenovo Unified Workspace 7.0.2.13 Released

        Highlights of Unified Workspace 7.0.2.13 Before you install: Please view the installation notes here. 7.0.2.13 requires a 7.0 license file. Below is a list of enhancements and fixes released in Unified Workspace 7.0.2.13 Fixed external storage ...
      • LanSchool Documentation Guides

        LanSchool Classic Teacher Console The LanSchool Teacher Console is the interface teachers will use to manage their classroom and students. It contains all the tools necessary for a teacher to effectively interact with students and create a ...
      • Lenovo Unified Workspace 7.0.1.41 Released

        Highlights of Unified Workspace 7.0.1.41 Before you install: Please view the installation notes here. 7.0.1.41 requires a 7.0 license file. Below is a list of enhancements and fixes for Unified Workspace 7.0.1.41 Updated Log4j Updated Java Updated ...
      • Related Articles

      • Unable to update schema - problem 5001 ( BUSY )

        The customer is trying to install webnetwork into Microsoft ad and is getting Unable to update the schema. And the following error is displayed: INFO (12/19) 11:01:05 [com.stoneware.service.DirectoryManager]: We are creating an AD connection. FATAL ...
      • Update schema during upgrades.

        During an upgrade, it says that I may have to make changed to update the schema. During an upgrade, the schema usually requires updating to add new attributes for webNetwork. If you use eDirectory there is typically nothing else that has to be done. ...
      • Update schema error : ServiceUnavailableException

        The customer is starting UW for the first time and when it tries to update the schema an error is displayed: LDAP: error code 51 - 000021A2: SvcErr: DSID-030A0AF2, problem 5001 (BUSY)   Running repadmin /showreps shows the following information ...
      • Unable to Verify / Extend Schema

        On the console the customer sees : FATAL (05/09) 12:10:51 [com.stoneware.service.DirectoryManager]: Unable to verify/extend schema. javax.naming.CommunicationException: simple bind failed: 10.1.1.17:636 [Root exception is ...
      • Directory Services Unable to Connect to Directory after update to 6.5.4.10

        Issue Customer upgraded Unified Workspace to 6.5.4.10.  Now when starting UW, Directory Services is unable to make a connection to the directory. More Information After further testing, it appeared that having the IP address instead of the DNS name ...