[SOLVED] Openvpn configuration issues

Hello,
To better illustrate the following here's an overview of my network:
LAN: 10.0.0.0/24; VPN (shall be): 10.0.2.0/24
Alyx: 10.0.0.1 / 10.0.2.1 (i presume) - Is the router and openvpn server (running Debian 5.0)
Praseodym: 10.0.0.4 / 10.0.2.4 (according to ipp.txt) - Is the client (currently local; may connect from internet eventually) (running Archlinux)
When trying to connect praseodym the tun interface gets created properly (according to ifconfig) but it not only get's sent the wrong adress (10.0.2.6) but also the wrong routes (10.0.2.5 as default gateway)
This of course makes it impossible to ping either alyx or any other host in 10.0.0.0/24
I'm sure i misconfigured somewhere but i just don't manage to actually find the error; any help would be greatly appreciated :-D
This is the server.conf on Alyx (with comments removed for length):
port 1194
proto udp
dev tun
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/alyx.crt
key /etc/openvpn/keys/alyx.key # This file should be kept secret
dh /etc/openvpn/keys/dh1024.pem
server 10.0.2.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 10.0.0.0 255.255.255.0"
push "redirect-gateway"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
client-to-client
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 4
This is the server.conf on Praseodym:
dev tun
remote alyx.lan.k-progs.org
tls-client
pull
ca /etc/openvpn/ca.crt
cert /etc/openvpn/praseodym.crt
key /etc/openvpn/praseodym.key
port 1194
comp-lzo
ping 15
ping-restart 45
ping-timer-rem
verb 3
Also, here are the log files of a connection attempt:
Log of openvpn --config /etc/openvpn/server.conf --verb 6 (On Alyx)
Tue May 3 13:51:49 2011
Tue May 3 13:51:49 2011 us=343679 Current Parameter Settings:
-- the entire config --
Tue May 3 13:51:49 2011 us=399621 OpenVPN 2.1_rc11 i486-pc-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] built on Sep 18 2008
Tue May 3 13:51:49 2011 us=488787 Diffie-Hellman initialized with 1024 bit key
Tue May 3 13:51:49 2011 us=494972 /usr/bin/openssl-vulnkey -q -b 1024 -m <modulus omitted>
Tue May 3 13:51:50 2011 us=491474 TLS-Auth MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue May 3 13:51:50 2011 us=532928 TUN/TAP device tun0 opened
Tue May 3 13:51:50 2011 us=533460 TUN/TAP TX queue length set to 100
Tue May 3 13:51:50 2011 us=533981 /sbin/ifconfig tun0 10.0.2.1 pointopoint 10.0.2.2 mtu 1500
Tue May 3 13:51:50 2011 us=539295 /sbin/route add -net 10.0.2.0 netmask 255.255.255.0 gw 10.0.2.2
Tue May 3 13:51:50 2011 us=543053 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Tue May 3 13:51:50 2011 us=543631 Socket Buffers: R=[111616->131072] S=[111616->131072]
Tue May 3 13:51:50 2011 us=544091 UDPv4 link local (bound): [undef]:1194
Tue May 3 13:51:50 2011 us=544469 UDPv4 link remote: [undef]
Tue May 3 13:51:50 2011 us=544868 MULTI: multi_init called, r=256 v=256
Tue May 3 13:51:50 2011 us=545386 IFCONFIG POOL: base=10.0.2.4 size=62
Tue May 3 13:51:50 2011 us=545812 IFCONFIG POOL LIST
Tue May 3 13:51:50 2011 us=546241 Initialization Sequence Completed
Tue May 3 13:52:25 2011 us=915080 MULTI: multi_create_instance called
Tue May 3 13:52:25 2011 us=915641 10.0.0.4:1194 Re-using SSL/TLS context
Tue May 3 13:52:25 2011 us=916094 10.0.0.4:1194 LZO compression initialized
Tue May 3 13:52:25 2011 us=917062 10.0.0.4:1194 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue May 3 13:52:25 2011 us=917483 10.0.0.4:1194 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Tue May 3 13:52:25 2011 us=918064 10.0.0.4:1194 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Tue May 3 13:52:25 2011 us=918525 10.0.0.4:1194 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Tue May 3 13:52:25 2011 us=919070 10.0.0.4:1194 Local Options hash (VER=V4): '530fdded'
Tue May 3 13:52:25 2011 us=919514 10.0.0.4:1194 Expected Remote Options hash (VER=V4): '41690919'
Tue May 3 13:52:25 2011 us=920072 10.0.0.4:1194 UDPv4 READ [14] from 10.0.0.4:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue May 3 13:52:25 2011 us=920566 10.0.0.4:1194 TLS: Initial packet from 10.0.0.4:1194, sid=665595c2 97acdb17
Tue May 3 13:52:25 2011 us=921066 10.0.0.4:1194 UDPv4 WRITE [26] to 10.0.0.4:1194: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ 0 ] pid=0 DATA len=0
Tue May 3 13:52:25 2011 us=922376 10.0.0.4:1194 UDPv4 READ [22] from 10.0.0.4:1194: P_ACK_V1 kid=0 [ 0 ]
Tue May 3 13:52:25 2011 us=923078 10.0.0.4:1194 UDPv4 READ [114] from 10.0.0.4:1194: P_CONTROL_V1 kid=0 [ ] pid=1 DATA len=100
-- repeats for a while --
Tue May 3 13:52:26 2011 us=144189 10.0.0.4:1194 VERIFY OK: depth=1, /C=DE/ST=<censored>/L=<censored>/O=K-Progs/CN=K-Progs_CA/emailAddress=<censored>
Tue May 3 13:52:26 2011 us=147233 10.0.0.4:1194 VERIFY OK: depth=0, /C=DE/ST=<censored>/L=<censored>/O=K-Progs/CN=praseodym/emailAddress=<censored>
-- continues repeating --
Tue May 3 13:52:26 2011 us=266154 10.0.0.4:1194 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue May 3 13:52:26 2011 us=266590 10.0.0.4:1194 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue May 3 13:52:26 2011 us=267443 10.0.0.4:1194 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue May 3 13:52:26 2011 us=267804 10.0.0.4:1194 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue May 3 13:52:26 2011 us=268951 10.0.0.4:1194 UDPv4 WRITE [126] to 10.0.0.4:1194: P_CONTROL_V1 kid=0 [ 28 ] pid=37 DATA len=100
Tue May 3 13:52:26 2011 us=269516 10.0.0.4:1194 UDPv4 WRITE [114] to 10.0.0.4:1194: P_CONTROL_V1 kid=0 [ ] pid=38 DATA len=100
Tue May 3 13:52:26 2011 us=270109 10.0.0.4:1194 UDPv4 WRITE [80] to 10.0.0.4:1194: P_CONTROL_V1 kid=0 [ ] pid=39 DATA len=66
Tue May 3 13:52:26 2011 us=270733 10.0.0.4:1194 UDPv4 READ [22] from 10.0.0.4:1194: P_ACK_V1 kid=0 [ 37 ]
Tue May 3 13:52:26 2011 us=271968 10.0.0.4:1194 UDPv4 READ [22] from 10.0.0.4:1194: P_ACK_V1 kid=0 [ 38 ]
Tue May 3 13:52:26 2011 us=274646 10.0.0.4:1194 UDPv4 READ [22] from 10.0.0.4:1194: P_ACK_V1 kid=0 [ 39 ]
Tue May 3 13:52:26 2011 us=275075 10.0.0.4:1194 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Tue May 3 13:52:26 2011 us=275567 10.0.0.4:1194 [praseodym] Peer Connection Initiated with 10.0.0.4:1194
Tue May 3 13:52:26 2011 us=276425 praseodym/10.0.0.4:1194 MULTI: Learn: 10.0.2.6 -> praseodym/10.0.0.4:1194
Tue May 3 13:52:26 2011 us=276825 praseodym/10.0.0.4:1194 MULTI: primary virtual IP for praseodym/10.0.0.4:1194: 10.0.2.6
Tue May 3 13:52:30 2011 us=780827 praseodym/10.0.0.4:1194 UDPv4 READ [104] from 10.0.0.4:1194: P_CONTROL_V1 kid=0 [ ] pid=29 DATA len=90
Tue May 3 13:52:30 2011 us=781588 praseodym/10.0.0.4:1194 PUSH: Received control message: 'PUSH_REQUEST'
Tue May 3 13:52:30 2011 us=782566 praseodym/10.0.0.4:1194 SENT CONTROL [praseodym]: 'PUSH_REPLY,route 10.0.0.0 255.255.255.0,redirect-gateway,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route 10.0.2.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.0.2.6 10.0.2.5' (status=1)
Tue May 3 13:52:30 2011 us=783091 praseodym/10.0.0.4:1194 UDPv4 WRITE [22] to 10.0.0.4:1194: P_ACK_V1 kid=0 [ 29 ]
Tue May 3 13:52:30 2011 us=783693 praseodym/10.0.0.4:1194 UDPv4 WRITE [114] to 10.0.0.4:1194: P_CONTROL_V1 kid=0 [ ] pid=40 DATA len=100
-- repeats itself --
Tue May 3 13:53:15 2011 us=3722 praseodym/10.0.0.4:1194 UDPv4 WRITE [16] to 10.0.0.4:1194: P_CONTROL_V1 kid=0 [ ] pid=42 DATA len=2
Tue May 3 13:53:17 2011 us=72864 praseodym/10.0.0.4:1194 UDPv4 WRITE [16] to 10.0.0.4:1194: P_CONTROL_V1 kid=0 [ ] pid=42 DATA len=2
Tue May 3 13:53:17 2011 us=73807 read UDPv4 [ECONNREFUSED]: Connection refused (code=111) -- This should be about where i killed it on praseodym
Tue May 3 13:53:19 2011 us=194021 praseodym/10.0.0.4:1194 UDPv4 WRITE [16] to 10.0.0.4:1194: P_CONTROL_V1 kid=0 [ ] pid=42 DATA len=2
Tue May 3 13:53:19 2011 us=194842 read UDPv4 [ECONNREFUSED]: Connection refused (code=111)
-- repeats --
Tue May 3 13:53:29 2011 us=659866 event_wait : Interrupted system call (code=4)
Tue May 3 13:53:29 2011 us=662316 TCP/UDP: Closing socket
Tue May 3 13:53:29 2011 us=662509 /sbin/route del -net 10.0.2.0 netmask 255.255.255.0
Tue May 3 13:53:29 2011 us=666153 Closing TUN/TAP interface
Tue May 3 13:53:29 2011 us=666297 /sbin/ifconfig tun0 0.0.0.0
Tue May 3 13:53:29 2011 us=687981 SIGINT[hard,] received, process exiting
Log of openvpn --config /etc/openvpn/server.conf --verb 6 (On Praseodym)
Tue May 3 14:06:03 2011
Tue May 3 14:06:03 2011 us=797132 Current Parameter Settings:
-- entire config --
Tue May 3 14:06:03 2011 us=799467 OpenVPN 2.1.4 i686-pc-linux-gnu [SSL] [LZO2] [EPOLL] built on Nov 13 2010
Tue May 3 14:06:03 2011 us=799532 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Tue May 3 14:06:03 2011 us=799543 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Tue May 3 14:06:03 2011 us=831145 LZO compression initialized
Tue May 3 14:06:03 2011 us=831289 Control Channel MTU parms [ L:1542 D:138 EF:38 EB:0 ET:0 EL:0 ]
Tue May 3 14:06:03 2011 us=831353 Socket Buffers: R=[114688->131072] S=[114688->131072]
Tue May 3 14:06:03 2011 us=833330 Data Channel MTU parms [ L:1542 D:1450 EF:42 EB:135 ET:0 EL:0 AF:3/1 ]
Tue May 3 14:06:03 2011 us=833386 Local Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Tue May 3 14:06:03 2011 us=833398 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1542,tun-mtu 1500,proto UDPv4,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Tue May 3 14:06:03 2011 us=833426 Local Options hash (VER=V4): '41690919'
Tue May 3 14:06:03 2011 us=833443 Expected Remote Options hash (VER=V4): '530fdded'
Tue May 3 14:06:03 2011 us=833466 UDPv4 link local (bound): [undef]:1194
Tue May 3 14:06:03 2011 us=833480 UDPv4 link remote: 10.0.0.1:1194
Tue May 3 14:06:03 2011 us=833551 UDPv4 WRITE [14] to 10.0.0.1:1194: P_CONTROL_HARD_RESET_CLIENT_V2 kid=0 [ ] pid=0 DATA len=0
Tue May 3 14:06:03 2011 us=840770 UDPv4 READ [26] from 10.0.0.1:1194: P_CONTROL_HARD_RESET_SERVER_V2 kid=0 [ 0 ] pid=0 DATA len=0
Tue May 3 14:06:03 2011 us=840831 TLS: Initial packet from 10.0.0.1:1194, sid=a0c0d596 fa3b4a5c
Tue May 3 14:06:03 2011 us=840898 UDPv4 WRITE [22] to 10.0.0.1:1194: P_ACK_V1 kid=0 [ 0 ]
Tue May 3 14:06:03 2011 us=840991 UDPv4 WRITE [114] to 10.0.0.1:1194: P_CONTROL_V1 kid=0 [ ] pid=1 DATA len=100
Tue May 3 14:06:03 2011 us=841034 UDPv4 WRITE [114] to 10.0.0.1:1194: P_CONTROL_V1 kid=0 [ ] pid=2 DATA len=100
Tue May 3 14:06:03 2011 us=841079 UDPv4 WRITE [25] to 10.0.0.1:1194: P_CONTROL_V1 kid=0 [ ] pid=3 DATA len=11
Tue May 3 14:06:03 2011 us=843441 UDPv4 READ [22] from 10.0.0.1:1194: P_ACK_V1 kid=0 [ 1 ]
-- repeats --
Tue May 3 14:06:03 2011 us=996540 VERIFY OK: depth=1, /C=DE/ST=<censored>/L=<censored>/O=K-Progs/CN=K-Progs_CA/emailAddress=<censored>
Tue May 3 14:06:03 2011 us=996859 VERIFY OK: depth=0, /C=DE/ST=<censored>/L=<censored>/O=K-Progs/CN=alyx/emailAddress=<censored>
Tue May 3 14:06:03 2011 us=996908 UDPv4 WRITE [22] to 10.0.0.1:1194: P_ACK_V1 kid=0 [ 19 ]
Tue May 3 14:06:03 2011 us=996973 UDPv4 READ [114] from 10.0.0.1:1194: P_CONTROL_V1 kid=0 [ ] pid=20 DATA len=100
-- repeats --
Tue May 3 14:06:04 2011 us=193026 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Tue May 3 14:06:04 2011 us=193041 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Tue May 3 14:06:04 2011 us=193066 UDPv4 WRITE [22] to 10.0.0.1:1194: P_ACK_V1 kid=0 [ 39 ]
Tue May 3 14:06:04 2011 us=193113 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Tue May 3 14:06:04 2011 us=193140 [alyx] Peer Connection Initiated with 10.0.0.1:1194
Tue May 3 14:06:06 2011 us=525590 SENT CONTROL [alyx]: 'PUSH_REQUEST' (status=1)
Tue May 3 14:06:06 2011 us=525689 UDPv4 WRITE [104] to 10.0.0.1:1194: P_CONTROL_V1 kid=0 [ ] pid=29 DATA len=90
Tue May 3 14:06:08 2011 us=697435 UDPv4 WRITE [104] to 10.0.0.1:1194: P_CONTROL_V1 kid=0 [ ] pid=29 DATA len=90
Tue May 3 14:06:08 2011 us=700865 UDPv4 READ [22] from 10.0.0.1:1194: P_ACK_V1 kid=0 [ 29 ]
Tue May 3 14:06:08 2011 us=702337 UDPv4 READ [114] from 10.0.0.1:1194: P_CONTROL_V1 kid=0 [ ] pid=40 DATA len=100
Tue May 3 14:06:08 2011 us=702401 UDPv4 WRITE [22] to 10.0.0.1:1194: P_ACK_V1 kid=0 [ 40 ]
Tue May 3 14:06:08 2011 us=704448 UDPv4 READ [114] from 10.0.0.1:1194: P_CONTROL_V1 kid=0 [ ] pid=41 DATA len=100
Tue May 3 14:06:08 2011 us=704484 UDPv4 WRITE [22] to 10.0.0.1:1194: P_ACK_V1 kid=0 [ 41 ]
Tue May 3 14:06:08 2011 us=704814 UDPv4 READ [16] from 10.0.0.1:1194: P_CONTROL_V1 kid=0 [ ] pid=42 DATA len=2
Tue May 3 14:06:08 2011 us=704881 PUSH: Received control message: 'PUSH_REPLY,route 10.0.0.0 255.255.255.0,redirect-gateway,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route 10.0.2.0 255.255.255.0,topology net30,ping 10,ping-restart 120,ifconfig 10.0.2.6 10.0.2.5'
Tue May 3 14:06:08 2011 us=704976 OPTIONS IMPORT: timers and/or timeouts modified
Tue May 3 14:06:08 2011 us=704989 OPTIONS IMPORT: --ifconfig/up options modified
Tue May 3 14:06:08 2011 us=704999 OPTIONS IMPORT: route options modified
Tue May 3 14:06:08 2011 us=705008 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Tue May 3 14:06:08 2011 us=705169 ROUTE default_gateway=10.0.0.1
Tue May 3 14:06:08 2011 us=757964 TUN/TAP device tun0 opened
Tue May 3 14:06:08 2011 us=758006 TUN/TAP TX queue length set to 100
Tue May 3 14:06:08 2011 us=758056 /sbin/ifconfig tun0 10.0.2.6 pointopoint 10.0.2.5 mtu 1500
Tue May 3 14:06:08 2011 us=759929 OpenVPN ROUTE: omitted no-op route: 10.0.0.1/255.255.255.255 -> 10.0.0.1
Tue May 3 14:06:08 2011 us=759970 /sbin/route del -net 0.0.0.0 netmask 0.0.0.0
Tue May 3 14:06:08 2011 us=772882 /sbin/route add -net 0.0.0.0 netmask 0.0.0.0 gw 10.0.2.5
Tue May 3 14:06:08 2011 us=773671 /sbin/route add -net 10.0.0.0 netmask 255.255.255.0 gw 10.0.2.5
Tue May 3 14:06:08 2011 us=774548 WARNING: potential route subnet conflict between local LAN [10.0.2.0/255.255.255.0] and remote VPN [10.0.2.0/255.255.255.0]
Tue May 3 14:06:08 2011 us=774590 /sbin/route add -net 10.0.2.0 netmask 255.255.255.0 gw 10.0.2.5
Tue May 3 14:06:08 2011 us=775248 Initialization Sequence Completed
Tue May 3 14:06:15 2011 us=480014 TUN READ [1500]
Tue May 3 14:06:15 2011 us=480068 UDPv4 WRITE [1541] to 10.0.0.1:1194: P_DATA_V1 kid=0 DATA len=1540
-- repeats until the logfile is about 80 MB O.o --
Tue May 3 14:06:53 2011 us=371147 TCP/UDP: Closing socket
Tue May 3 14:06:53 2011 us=371194 /sbin/route del -net 10.0.2.0 netmask 255.255.255.0
Tue May 3 14:06:53 2011 us=372114 /sbin/route del -net 10.0.0.0 netmask 255.255.255.0
Tue May 3 14:06:53 2011 us=372807 /sbin/route del -net 10.0.0.1 netmask 255.255.255.255
SIOCDELRT: No such process
Tue May 3 14:06:53 2011 us=373472 ERROR: Linux route delete command failed: external program exited with error status: 7
Tue May 3 14:06:53 2011 us=373511 /sbin/route del -net 0.0.0.0 netmask 0.0.0.0
Tue May 3 14:06:53 2011 us=374202 /sbin/route add -net 0.0.0.0 netmask 0.0.0.0 gw 10.0.0.1
Tue May 3 14:06:53 2011 us=374869 Closing TUN/TAP interface
Tue May 3 14:06:53 2011 us=374896 /sbin/ifconfig tun0 0.0.0.0
Tue May 3 14:06:53 2011 us=407592 SIGINT[hard,] received, process exiting
Last edited by Greg10 (2011-05-07 06:38:43)

Shouldn't the push "redirect-gateway" directive take care of that?
Also I unfortunatly can only test whether I'm able to connect from the outside on saturday.
I'll see if I can get Praseodym to work in my DMZ (that'd be 10.0.1.0/24) later this day though.
Thanks for the tip :-)
Edit: Thanks a lot indeed;
Having Praseodym be 10.0.1.2 (alyx being 10.0.1.1 in the dmz) actually solved the problems i've been having (for local connectivity that is; i can't really know if it's working unless i test it from the web)
Last edited by Greg10 (2011-05-04 15:27:04)

Similar Messages

  • [solved]xorg configuration issues, either no mouse or flickering

    Hey all, ok well a little while ago I was having trouble with hda-intel and trying to get a decent frame rate on my card, it was never solved, now after an upgrade the problem seems to have solved itself, that is except now it flickers when playing a game.
    So I backup up my /etc/X11/xorg.conf and then deleted it, and with startx x works fine and the game doesnt flicker, although without an xorg.conf (I beleive it uses hal?) my netbook's mouse doesn't work.
    Placing the backed up xorg.conf back into /etc/X11/ reverses the problem, I have a mouse, but games = flickering.
    I am FINALLY getting 55fps on super mario chronicles (my test game).
    Here is the relevant lspci output:
    00:02.0 VGA compatible controller: Intel Corporation Mobile 945GME Express Integrated Graphics Controller (rev 03)
    00:02.1 Display controller: Intel Corporation Mobile 945GM/GMS/GME, 943/940GML Express Integrated Graphics Controller (rev 03)
    Here is my xorg.conf that allows my mouse to work but gives me flickering, I have tried fiddling around by commenting out various lines and even whole sections but nothing has changed so I reverted the changes:
    http://pastebin.org/85669
    I also noted that if I moved /etc/X11/xorg.conf to the current directory and tried to run it, it wouldn't work, this same behavior occured with trying as root, and trying with the conf file generated from X -config although if I then moved the X -config file to /etc/X11 and used startx it would exhibit the same behavior as having no xorg.conf file in /etc/X11
    Thanks again,
    ~Ducky
    Last edited by suicideducky (2010-02-03 06:29:41)

    Thank for that Zack89, problem solved, for those interested I installed the xf86-input-synaptics package and removed my xorg.conf, if you do this make sure you have hal and dbus installed.
    To get my touchpad to be 'more' equal in both direction I followed the instruction in man synaptics and at http://wiki.archlinux.org/index.php/Synaptics.
    After doing cp /usr/share/hal/fdi/policy/10osvendor/11-x11-synaptics.fdi /etc/hal/fdi/policy/ I then added the following two lines in /etc/hal/fdi/policy/11-x11-synaptics.fdi
    <merge key="input.x11_options.VertResolution" type="string">57</merge>
    <merge key="input.x11_options.HorizResolution" type="string">57</merge>
    The two values are meant to be height and width so that synaptics can scale its calculations accordingly, instead I supplied both values with the width so that I would have even mouse movement.
    Thanks again all,
    ~Chris

  • [solved]dzen2 configuration issue

    I want split the groups + windows in the right side of the dzen bar and the time and "system tray" to the left.
    my first idea was to have two dzen2 processes running, one align to the right and one to the left, but looking through the wiki I found ^p(_RIGHT) and ^p(_LEFT), great! but it doesn't work.
    here is my code:
    append(){
    txt=$*$text
    while true; do
    append "^p(_LEFT)"\
    `ratpoison -c groups -c windows | sed -e 's\^[0-9][*]\^fg(#FF00FF)\' -e 's\^[0-9][-]\^fg(#A800A8)\' -e 's\^[0-9][+]\^fg(#000054)\'`\
    "^p(_RIGHT)"\
    `date | awk '{print $4}'`
    echo "$txt"
    sleep 1
    done | dzen2
    other question, how could I have the sed output in only one line? the function append just does that, take the break lines out, and how could I use outside variables with sed? it would be easier to change the colors because i didn't found a good color set(any sugestions?)
    Last edited by hack.augusto (2009-02-05 00:37:57)

    The command ^p(_RIGHT) aligns the following text to the right, but in somewhat strange manner:
    the first letter you type after this commmand occurs right of the right edge of the screen, so of course it isn't visible.
    So to get the expected behaviour you have to do following:
    Be W the width of the text you want to have right aligned in pixels, type
    ^p(_RIGHT)^p(-W)textyouwannadisplay
    So ^p(KEYWORD) is to understand as a switch that jumps to the position KEYWORD.
    Hope that will help someone.
    EDIT: This may concern only the actual svn-version
    Last edited by stalphonzo (2011-12-21 08:34:14)

  • Support for multiple OpenVPN configurations with systemd

    In Debian I just put the OpenVPN configurations in /etc/openvpn. This makes all of them start automatically at boot time.
    In Arch I tried with
    systemctl start [email protected]
    Where FILENAME is the filename of a OpenVPN configuration in /etc/openvpn. This brings up OpenVPN but it also brings down all other OpenVPN configurations started this way.
    How should I go about solving this, and getting a similar behaviour as in Debian?
    Last edited by 84081 (2013-07-30 09:20:22)

    markus40 wrote:
    With the link named '[email protected]'
    the openvpn config file name must have name '/etc/openvpnFILENAME.conf'
    not '/etc/openvpnFILENAME'.
    With your mail it is not clear if you did this...
    Yeah I'm not having an issue with OpenVPN. Those configurations work well. They also start with systemctl, BUT it's only possible to run one OpenVPN instance at a time through systemd on Arch Linux.
    So my issue is Arch Linux or systemd specific.

  • Configuration Issue in User Mapping ..

    Hi,
    Pls help resolve this issue..
    When i go to <b>" UserMapping "</b> option using the <b>"Personalize "</b> link , i get the following error msg..
    "There is a configuration issue which leads to problem when accessing user mapping data for the selected backend system"
    Also , if i go thru "User Administration -> User Mapping "
    then it says,
    --"There is a configuration issue which leads to problem when accessing user mapping data for the selected backend system  .
    Usually reason is user mapping being configured for Strong encryption, but necessary additional files might be missing.Check Security log file for information "--
    I am not able to solve this problem..Pls help
    Thanks in advance

    Hi Venkat,
    <b>Here the quick and dirty solution</b>:
    In your portal go to 'System Administration' -> 'System Configuration' -> 'UM Configuration' -> 'Direct Editing'.
    There locate the parameter 'ume.usermapping.unsecure', set it to 'TRUE' and restart your server.
    I would rather recommend to install the unlimited strength jurisdiction policy files.
    For more info on this, check this thread:
    JCE Jurisdiction does not allow Portal to start
    Hope this helps,
    Robert

  • Configuration issue of syslog.conf

    Dear All,
    My client is facing a configuration issue of syslog.conf.
    They have set a cacti on a Linux server for monitoring of all servers snmp & syslog.
    The part of snmp has set up successfully but cannot send the syslog to the cacti.
    My client want the syslog can keep on the localhost and send to cacti for monitoring
    we have tried to do the following things for make it work:
    Insert the information (*.* @10.251.99.74) in /etc/syslog.conf
    Restart service of system-log
    Deleted all word of loghost in the /etc/hosts file
    But still not work. Anyone can give me suggestion or idea about this?

    Thank you for your reply.
    It is tab. But I think the problem is solaris cannot use *.* to represent all logs.
    I have used the following is work
    *.err;ker.debug;daemon.notice;mail.crit @10.251.99.74
    If that is not the mail reason, please put me right.

  • Anti-relay filter configuration issues

    Configuration issues with the anti-relay filter in Messaging Server 4.1x.
    The following information addresses common questions about configuration issues
    with the anti-relay filter in Messaging Server 4.1x:<BR>
    <P>
    <OL>
    <LI><B>Question:</B><BR>
    What is the difference between the delivery
    and submission
    options?<BR>
    <P>
    <B>Answer:</B><BR>
    The submission option
    allows specified users to send email to any email address in the world.
    These users are typically internal users.
    <P>
    The delivery option
    allows specified users to receive email from anybody. These users
    are also typically internal users.
    <P>
    A standard filter will appear something as follows:<BR>
    <P>
    # This is the anti-relay config file written by Jay at iPlanet
    # The first section sets default conditions
    resolvehostnames:0
    useauthinfo:0
    advertiseauthinfo:1
    # This section sets domains to be delivered to by anybody
    delivery:*@my.domain.com
    # This section sets domains that can send any place
    submission:129.12.4.*
    <P>
    <P>
    <LI><B>Question:</B><BR>
    The delivery
    option works properly. However, why doesn't the
    submission option
    appear to be allowing emails from specified users to pass through?
    <P>
    <B>Answer:</B><BR>
    The problem with the submission behavior could be due to the setting of the
    the resolvehostnames
    parameter. If this parameter is turned on
    (resolvehostnames:1),
    then <I>all</I> entries in this configuration file must be fully qualified
    host names. Although wildcards will work, you cannot specify IP
    addresses with this configuration setting.
    <P>
    <P>
    <LI><B>Question:</B><BR>
    Is it possible to allow people outside of my network to connect to the server
    and send mail out?
    <P>
    <B>Answer:</B><BR>
    Yes. To allow outside users to connect to the server and send mail
    to any address, without granting the same privilege to the rest of the world,
    activate the authenticated SMTP portion of the filter via the
    useauthinfo option.
    Setting this parameter to "1" (i.e., useauthinfo:1
    ) will require a user who is not in a
    submission address and who is attempting to send email to an address not in
    the delivery range to authenticate with a user ID and password.
    </OL>
    <P>
    For additional information on the anti-relay filter, please refer to the
    Messaging Server 4.1 Administrator's Guide at<BR>
    <P>
    http://docs.iplanet.com/docs/manuals/messaging/nms41/ag/ubefiltr.htm#1073677

    Prashant:
    Are you using a UBE filter to configure domain-based anti-relayinging? We had better luck with the anti-relay plug-in. There is some info on this (for 4.15) at
    http://docs.sun.com/source/816-6044-10/ubefiltr.htm#1069973
    You have to enable the plug-in using configutil, per the above. The anti-relay plug-in is controlled by antirelay.conf. Be aware that the pattern matching rules are very limited, and not well documented. Fortunately, the source code to the plug-in is included, and you can see what it is doing. To pass the tests we had to add a hard-coded test for a "%" in the source and recompile:
    *** antirelay.c.orig Thu Oct 31 04:42:13 2002
    --- antirelay.c Thu Oct 31 04:22:07 2002
    *** 934,939 ****
    --- 934,940 ----
    * Weight must be non-zero to begin with so that matches on just "*"
    * will work.
    + if( strchr(text,'%') != NULL ) return ABORT;
    weight = TRUE;
    for ( ; *p; text++, p++) {
    if (*text == '\0' && p != '')
    Not a really elegant hack, but we didn't need a fully functional regex engine.

  • I updated my Iphone 4s to IOS 7, now it reboots after every 2 minutes, I tried to restore, but the reboot gets it disconnected from PC, help me solve this reboot issue..

    I updated my Iphone 4s to IOS 7, now it reboots after every 2 minutes, I tried to restore, but the reboot gets it disconnected from PC, help me solve this reboot issue..

    See Here  >  http://support.apple.com/kb/HT1808
    You may need to try this More than Once...
    Be sure to Follow ALL the Steps...
    But... if the Device has been Modified... this will Not necessarily work.

  • Oracle 11g Fusion Middleware (11.1.1.3.0) Report Configuration Issue

    Oracle 11g Fusion Middleware (11.1.1.3.0) Report Configuration Issue
    =============================================
    Hi All,
    I have installed Oracle 11g Fusion Middleware (11.1.1.3.0) on Oracle Linux 5 and getting some issues while configuring. What's happening is that when I run my report, it looks for the library attached to it. If I define the REPORTS_PATH in reports.sh, it works fine.
    What I want to achieve is to push reports to use REPORTS_PATH environment variable from rwserver.conf instead of reports.sh
    Someone told me to remove the REPORTS_PATH from reports.sh and add the REPORTS_PATH from reports.sh to a default.env in rwserver.conf, but it didn't worked.
    What I know about the report server stuff in 11g Fusion Middleware is that it consists of two different servers (Standalone and In Process). Our application runs report using SRW.RUN_REPORT which basically use In Process report server setting in rwserver.conf to run the report.
    The heirarchy in which reports try to look for the REPORTS_PATH is
    1) REPORTS.sh
    2) rwserver.conf
    3) Settings as per Oracle Enterprise Manager Configuration Settings.
    My standalone report server name is ReportsServer_hostname_asinst_F and the In Process Server name is rep_wls_reports_hostname_asinst_frd. When I define rep_wls_reports_hostname_asinst_frd (In process Report Server Name) for the server name parameter, I do not get any results for the report run using srw.run_report. Also I can't see the reason behind the report executed because of the following issue
    http://hostname:8888/reports/rwservlet/showjobs?server=rep_wls_reports_hostname_asinst_frd
    REP-51019: System user authentication is missing.
    ** the Singlesignon in rwservlet.properties is defined as no
    But when I define ReportsServer_hostname_asinst_F (Standalone Report Server Name) as server parameter and ran the report using srw.run_report, I get result with the REPORTS_PATH defined in reports.sh not using rwserver.conf file.
    http://hostname:8888/reports/rwservlet/showjobs?server=ReportsServer_hostname_asinst_F
    (which shows the report just run).
    Can someone who did Report Server configuration using ENV files (changing rwserver.conf), pls. send me the screenshots. Want to make sure if I am changing the correct files under correct location.
    Pls. feel free to ask me questions related to the environment set up.
    Thanks

    Your question belongs in {forum:id=84}
    John

  • Profit cebter and copany code configuration issue

    i am making one sales order in which the item number level when i put profit center GB03100004 earlier i was getting company
    code in profit segment as GB03, but now i am getting as GB01.
    is this related to any configuration issue, please let me know.

    Hi,
    Goto the T.Code KE53.
    Enter the Controlling area.
    Enter the profit centre.
    Click on Company Codes.
    Check for which company code the field "Assigned" is ticked.
    Please check with your FICO consultant for more information and modifications.
    Regards,
    Krishna.

  • EM Configuration issue.

    I have installed grid agent on different server. When i ran emctl status agent i am getting below error.
    EM Configuration issue. /u01/app/oracle/product/10g/hostname.com_ORCL.
    OS is AIX
    Thanks in advance...

    I am in AGENT_HOME.You are under Agent installation that's one thing. You also need to make sure your environment variable ORACLE_HOME point to AGENT_HOME not the database installation.

  • OC4J Configuration issue

    Hi,
    I tried to put my database in Archivelog mode through EM , at the time of restarting the database it didnt start... instance is starting but database is not opening....
    I tried this command but its giving error... ( I am running 10g r2 , on RHEL 5 which is install on Oracle virtual toolbox )
    emctl start dbconsole
    OC4J Configuration issue. /opt/oracle/oraclehome_112/db_1/oc4j/j2ee/OC4J_DBConsole_myhostname_orcl not found.
    where orcl is the instance name.
    and this directory, OC4J_DBConsole_myhostname_orcl, does not exist on the file system.
    In some article I read ... the solution I tried to type...
    http://kamranagayev.com/2011/03/21/step-by-step-installing-oracle11g-on-linux/
    Feedback no. 19
    ./emca -deconfig dbcontrol db -repos drop
    bash : ./emca : No Such file or Directory
    ./emca -config dbcontrol db -repos create
    Thanks and regards...

    Hello;
    I'm thinking this step was either missed of you have a typo :
    Change the entry of .bash_profile file of the oracle user and add following lines:
    vi /home/oracle/.bash_profile
    export ORACLE_HOME=/u01/home/oracle/product/11.2.0/db_1
    export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:$ORACLE_HOME/lib
    export PATH=$ORACLE_HOME/bin:$PATHIf your ORACLE_HOME is set it should find the "emca".
    You can test by running these export commands at the Linux prompt.
    The which command is your friend
    which emca
    /u01/app/oracle/product/11.2.0.2/bin/emcaBest Regards
    mseberg
    Edited by: mseberg on Feb 29, 2012 2:52 PM

  • Lync 2013 to Exchange 2013 Oauth problem - Error:[OAuthTokenBuilder:GetAppToken] unable to continue building token; no locally configured issuer

    Hi,
    I am having a problem getting OAuth to work from Exchange 2013 to Lync 2013.
    I have read and following the instructions online and cannot see what I am doing wrong.
    On the Exchange 2013 server, I get the following error when I run:
    Test-OAuthConnectivity -Service EWS -TargetUri
    https://exchserver2.domainname.local/ews/ -Mailbox "Jack"
    RunspaceId : 920118a3-6ab2-45dc-9b68-de68133de95e
    Task : Checking EWS API Call Under Oauth
    Detail : The configuration was last successfully loaded at 01/01/0001 00:00:00 UTC. This was 1059263714 minutes
    ago.
    The token cache is being cleared because "use cached token" was set to false.
    Exchange Outbound Oauth Log:
    Client request ID: 19ad80f6-7751-429f-aac5-e802105fbbc6
    Information:[OAuthCredentials:Authenticate] entering
    Information:[OAuthCredentials:Authenticate] challenge from
    'https://exchserver2.domainname.local/ews/Exchange.asmx' received: Bearer
    client_id="00000002-0000-0ff1-ce00-000000000000",
    trusted_issuers="[email protected]",Negotiate,NTLM
    Information:[OAuthCredentials:GetToken] client-id: '00000002-0000-0ff1-ce00-000000000000', realm: '',
    trusted_issuer: '[email protected]'
    Information:[OAuthCredentials:GetToken] start building a token for the user domain 'domainname.co.uk'
    Information:[OAuthTokenBuilder:GetAppToken] start building the apptoken
    Information:[OAuthTokenBuilder:GetAppToken] checking enabled auth servers
    Error:[OAuthTokenBuilder:GetAppToken] unable to continue building token; no locally configured issuer
    was in the trusted_issuer list, realm from challenge was also empty. trust_issuers was
    [email protected]
    Error:The trusted issuers contained the following entries
    '[email protected]'. None of them are configured locally.
    Exchange Response Details:
    HTTP response message:
    Exception:
    System.Net.WebException: The request was aborted: The request was canceled. --->
    Microsoft.Exchange.Security.OAuth.OAuthTokenRequestFailedException: The trusted issuers contained the
    following entries '[email protected]'. None of them are
    configured locally.
    at Microsoft.Exchange.Security.OAuth.OAuthTokenBuilder.GetAppToken(String applicationId, String
    destinationHost, String realmFromChallenge, IssuerMetadata[] trustedIssuersFromChallenge, String
    userDomain)
    at Microsoft.Exchange.Security.OAuth.OAuthTokenBuilder.GetAppWithUserToken(String applicationId,
    String destinationHost, String realmFromChallenge, IssuerMetadata[] trustedIssuersFromChallenge, String
    userDomain, ClaimProvider claimProvider)
    at Microsoft.Exchange.Security.OAuth.OAuthCredentials.GetToken(WebRequest webRequest,
    HttpAuthenticationChallenge challengeObject)
    at Microsoft.Exchange.Security.OAuth.OAuthCredentials.Authenticate(String challengeString, WebRequest
    webRequest, Boolean preAuthenticate)
    at Microsoft.Exchange.Security.OAuth.OAuthCredentials.OAuthAuthenticationModule.Authenticate(String
    challenge, WebRequest request, ICredentials credentials)
    at System.Net.AuthenticationManager.Authenticate(String challenge, WebRequest request, ICredentials
    credentials)
    at System.Net.AuthenticationState.AttemptAuthenticate(HttpWebRequest httpWebRequest, ICredentials
    authInfo)
    at System.Net.HttpWebRequest.CheckResubmitForAuth()
    at System.Net.HttpWebRequest.CheckResubmit(Exception& e, Boolean& disableUpload)
    at System.Net.HttpWebRequest.DoSubmitRequestProcessing(Exception& exception)
    at System.Net.HttpWebRequest.ProcessResponse()
    at System.Net.HttpWebRequest.SetResponse(CoreResponseData coreResponseData)
    --- End of inner exception stack trace ---
    at System.Net.HttpWebRequest.GetResponse()
    at Microsoft.Exchange.Monitoring.TestOAuthConnectivityHelper.SendExchangeOAuthRequest(ADUser user,
    String orgDomain, Uri targetUri, String& diagnosticMessage, Boolean appOnly, Boolean useCachedToken,
    Boolean reloadConfig)
    ResultType : Error
    Identity : Microsoft.Exchange.Security.OAuth.ValidationResultNodeId
    IsValid : True
    ObjectState : New
    It appears to work fine from Lync 2013 to Exchange 2013.
    When I run: Test-CsExStorageConnectivity -sipuri [email protected] -Binding Nettcp -Verbose in Lync 2013 I get a successful outcome:
    VERBOSE: Successfully opened a connection to storage service at localhost using
    binding: NetNamedPipe.
    VERBOSE: Create message.
    VERBOSE: Execute Exchange Storage Command.
    VERBOSE: Processing web storage response for ExCreateItem Success.,
    result=Success, activityId=0bbdc565-4a05-4b57-bf95-0c75488a1ef6, reason=.
    VERBOSE: Activity tracing:
    2015/01/02 19:15:55.616 Autodiscover, send GetUserSettings request,
    [email protected], Autodiscover
    Uri=https://exchserver2.domainname.local/autodiscover/autodiscover.svc, Web
    Proxy=<NULL>
    2015/01/02 19:15:55.616 Autodiscover.EWSMA trace,
    type=AutodiscoverRequestHttpHeaders, message=<Trace
    Tag="AutodiscoverRequestHttpHeaders" Tid="30" Time="2015-01-02 19:15:55Z">
    POST /autodiscover/autodiscover.svc HTTP/1.1
    Content-Type: text/xml; charset=utf-8
    Accept: text/xml
    User-Agent: ExchangeServicesClient/15.00.0516.004
    </Trace>
    2015/01/02 19:15:55.624 Autodiscover.EWSMA trace, type=AutodiscoverRequest,
    message=<Trace Tag="AutodiscoverRequest" Tid="30" Time="2015-01-02 19:15:55Z"
    Version="15.00.0516.004">
    <?xml version="1.0" encoding="utf-8"?>
    <soap:Envelope
    xmlns:a="http://schemas.microsoft.com/exchange/2010/Autodiscover"
    xmlns:wsa="http://www.w3.org/2005/08/addressing"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
    <soap:Header>
    <a:RequestedServerVersion>Exchange2013</a:RequestedServerVersion>
    <wsa:Action>http://schemas.microsoft.com/exchange/2010/Autodiscover/Autodiscove
    r/GetUserSettings</wsa:Action>
    <wsa:To>https://exchserver2.domainname.local/autodiscover/autodiscover.svc</
    wsa:To>
    </soap:Header>
    <soap:Body>
    <a:GetUserSettingsRequestMessage
    xmlns:a="http://schemas.microsoft.com/exchange/2010/Autodiscover">
    <a:Request>
    <a:Users>
    <a:User>
    <a:Mailbox>[email protected]</a:Mailbox>
    </a:User>
    </a:Users>
    <a:RequestedSettings>
    <a:Setting>InternalEwsUrl</a:Setting>
    <a:Setting>ExternalEwsUrl</a:Setting>
    <a:Setting>ExternalEwsVersion</a:Setting>
    </a:RequestedSettings>
    </a:Request>
    </a:GetUserSettingsRequestMessage>
    </soap:Body>
    </soap:Envelope>
    </Trace>
    2015/01/02 19:15:55.704 Autodiscover.EWSMA trace,
    type=AutodiscoverResponseHttpHeaders, message=<Trace
    Tag="AutodiscoverResponseHttpHeaders" Tid="30" Time="2015-01-02 19:15:55Z">
    HTTP/1.1 200 OK
    Transfer-Encoding: chunked
    request-id: 5917d246-64b0-48e2-ad79-f9b6cffb5bea
    X-CalculatedBETarget: exchserver2.domainname.local
    X-DiagInfo: EXCHSERVER2
    X-BEServer: EXCHSERVER2
    Cache-Control: private
    Content-Type: text/xml; charset=utf-8
    Set-Cookie: ClientId=FTFXWUQWWRJVBMNBG; expires=Sat, 02-Jan-2016 19:15:55 GMT;
    path=/;
    HttpOnly,X-BackEndCookie=actas1(sid:S-1-5-21-3691024758-535552880-811174816-113
    5|smtp:[email protected]|upn:[email protected])=u56Lnp2ejJqBx8jIn
    sqbxpvSz8rHx9LLzp7O0sbOzcnSzcqcmZqem8aempmcgYHNz87K0s/N0s/Oq87Gxc7KxcrK;
    expires=Sun, 01-Feb-2015 19:15:55 GMT; path=/autodiscover; secure; HttpOnly
    Server: Microsoft-IIS/8.5
    X-AspNet-Version: 4.0.30319
    X-Powered-By: ASP.NET
    X-FEServer: EXCHSERVER2
    Date: Fri, 02 Jan 2015 19:15:55 GMT
    </Trace>
    2015/01/02 19:15:55.704 Autodiscover.EWSMA trace, type=AutodiscoverResponse,
    message=<Trace Tag="AutodiscoverResponse" Tid="30" Time="2015-01-02 19:15:55Z"
    Version="15.00.0516.004">
    <s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"
    xmlns:a="http://www.w3.org/2005/08/addressing">
    <s:Header>
    <a:Action
    s:mustUnderstand="1">http://schemas.microsoft.com/exchange/2010/Autodiscover/Au
    todiscover/GetUserSettingsResponse</a:Action>
    <h:ServerVersionInfo
    xmlns:h="http://schemas.microsoft.com/exchange/2010/Autodiscover"
    xmlns:i="http://www.w3.org/2001/XMLSchema-instance">
    <h:MajorVersion>15</h:MajorVersion>
    <h:MinorVersion>0</h:MinorVersion>
    <h:MajorBuildNumber>1044</h:MajorBuildNumber>
    <h:MinorBuildNumber>21</h:MinorBuildNumber>
    <h:Version>Exchange2013_SP1</h:Version>
    </h:ServerVersionInfo>
    </s:Header>
    <s:Body>
    <GetUserSettingsResponseMessage
    xmlns="http://schemas.microsoft.com/exchange/2010/Autodiscover">
    <Response xmlns:i="http://www.w3.org/2001/XMLSchema-instance">
    <ErrorCode>NoError</ErrorCode>
    <ErrorMessage />
    <UserResponses>
    <UserResponse>
    <ErrorCode>NoError</ErrorCode>
    <ErrorMessage>No error.</ErrorMessage>
    <RedirectTarget i:nil="true" />
    <UserSettingErrors />
    <UserSettings>
    <UserSetting i:type="StringSetting">
    <Name>InternalEwsUrl</Name>
    <Value>https://exchserver2.domainname.local/EWS/Exchange.asmx</Value>
    </UserSetting>
    <UserSetting i:type="StringSetting">
    <Name>ExternalEwsUrl</Name>
    <Value>https://exchserver2.domainname.co.uk/EWS/Exchange.asmx</Value>
    </UserSetting>
    <UserSetting i:type="StringSetting">
    <Name>ExternalEwsVersion</Name>
    <Value>15.00.1044.000</Value>
    </UserSetting>
    </UserSettings>
    </UserResponse>
    </UserResponses>
    </Response>
    </GetUserSettingsResponseMessage>
    </s:Body>
    </s:Envelope>
    </Trace>
    2015/01/02 19:15:55.704 Autodiscover, received GetUserSettings response,
    duration Ms=88, response=NoError
    2015/01/02 19:15:55.706 Lookup user details,
    sipUri=sip:[email protected], [email protected],
    sid=S-1-5-21-3691024758-535552880-811174816-1135, [email protected],
    tenantId=00000000-0000-0000-0000-000000000000
    VERBOSE: Items choice type: CreateItemResponseMessage.
    VERBOSE: Response message, class: Success, code: NoError.
    VERBOSE: Item: Microsoft.Rtc.Internal.Storage.Exchange.Ews.MessageType, Id:
    AAMkADAwNWZkZWI0LWM5NGYtNDUxNy05Nzk3LWZhZjRiY2Y4MTU4NwBGAAAAAADLP1MgTEXdQ7zQSlb
    qPl++BwBauhRZTfLbTYZ+hBWtK784ANcdmUYqAACSqIurRqgYSZwMhT/IBw89AACnT6G9AAA=,
    change key: CQAAABYAAACSqIurRqgYSZwMhT/IBw89AACnip6b, subject: , body: .
    VERBOSE: Is command successful: True.
    Test passed.
    All my certificates on the Exchange 2013 and Lync 2013 servers are from my local CA.
    I use APP with the public certificates as my reverse proxy for people connecting from outside the network.
    In Lync, the OAuthTokenIssuer certificate created through the Lync deployment wizard is issued to domainname.local (my primary sip domain) and the Subject Alternative names include domainname.co.uk
    I then exported this certificate to the Exchange Server and use the Set-AuthConfig to use this certificate for OAuth.
    from what I read this was what I was supposed to do.
    is this correct?
    I have tried so many things I don't know what do to next.
    Should the OAuth certificate in exchange be the one exported from Lync?
    In Lync, should the OAuthTokenIssuer certificate include the servername or lyncserver.domainname.local or just be domainname.local like it is at the moment?
    thank-you
    jack

    Thomas,
    thanks for giving this the time. I have run the Configure-EnterpriseApplication.ps1 script following by remove-PartnerApplication so many times that I was wondering if there are other setting that
    Configure-EnterpriseApplication.ps1 creates that aer not removed when you run
    remove-PartnerApplication.
    is there a way to completely remove everything that is confirmed when you run
    Configure-EnterpriseApplication.ps1 so I can run Configure-EnterpriseApplication.ps1 without there being any configurations left from when I previously run that command?
    thanks
    jack
    [PS] C:\Windows\system32>Get-PartnerApplication |fl
    RunspaceId : cb2fb328-769d-4b32-8b7b-1fa35e2994f5
    Enabled : True
    ApplicationIdentifier : 00000004-0000-0ff1-ce00-000000000000
    CertificateStrings : {MIIGcDCCBVigAwIBAgITPgAAARIHL+ig32UAAQAAAAABEjANBgkqhkiG9w0BAQUFADBcMRUwEwYKCZIm
    iZPyLGQBGRYFbG9jYWwxHTAbBgoJkiaJk/IsZAEZFg1HdWlkZUNsb3RoaW5nMSQwIgYDVQQDExtHdWlkZ
    UNsb3RoaW5nLUFQUFNFUlZFUjEtQ0EwHhcNMTUwMTEwMTIxODIzWhcNMTcwMTA5MTIxODIzWjB7MQswCQ
    YDVQQGEwJHQjEPMA0GA1UECBMGTG9uZG9uMQ8wDQYDVQQHEwZMb25kb24xHzAdBgNVBAoTFkd1aWRlIEN
    sb3RoaW5nIExpbWl0ZWQxCzAJBgNVBAsTAkhRMRwwGgYDVQQDExNHdWlkZUNsb3RoaW5nLmNvLnVrMIIB
    IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzDzaLsjJfktsbwIJ998ihsZM/0rKGdIt8rIx00oc
    HA7w0uVyz2UqnP9a8uRi6HkA7djbynlmGG0hKSUUQngXxz7q2dY6q9rcY5Rw2mJOMeppounx44FFp4+4e
    5HQKviLTYo+3DBGIR0mYDqxanKPS00d0f7HDLvmVb90hjdrbE372JBdcNNHs2OHRqg37bN2fAbwd22c9x
    2kvi0rESFnr+KcIGECVInCTHLJ7fwVqvi4hvRqtz7KLZsMXprpgeVDs45EMMRtwJ5Hw8uZR4CFz4dHSlo
    dIVgDPn8Ns2vGhcUK0JU4WkDbjnqo1SJzHlqtNjiu//wGcn77PAiM0yhyQIDAQABo4IDCjCCAwYwCwYDV
    R0PBAQDAgWgMCEGCSsGAQQBgjcUAgQUHhIAVwBlAGIAUwBlAHIAdgBlAHIwEwYDVR0lBAwwCgYIKwYBBQ
    UHAwEwHQYDVR0OBBYEFOY3whPicRAXNsTDSIg3FexpaCKdMHUGA1UdEQRuMGyCH0x5bmNTZXJ2ZXIyLkd
    1aWRlQ2xvdGhpbmcuY28udWuCH0x5bmNTZXJ2ZXIyLkd1aWRlQ2xvdGhpbmcubG9jYWyCE0d1aWRlQ2xv
    dGhpbmcuY28udWuCE0d1aWRlQ2xvdGhpbmcubG9jYWwwHwYDVR0jBBgwFoAUDHst3gUSMGwvkiNTPavmi
    UEWgtQwggEuBgNVHR8EggElMIIBITCCAR2gggEZoIIBFYaBzWxkYXA6Ly8vQ049R3VpZGVDbG90aGluZy
    1BUFBTRVJWRVIxLUNBLENOPURvbVNlcnZlcjIsQ049Q0RQLENOPVB1YmxpYyUyMEtleSUyMFNlcnZpY2V
    zLENOPVNlcnZpY2VzLENOPUNvbmZpZ3VyYXRpb24sREM9R3VpZGVDbG90aGluZyxEQz1sb2NhbD9jZXJ0
    aWZpY2F0ZVJldm9jYXRpb25MaXN0P2Jhc2U/b2JqZWN0Q2xhc3M9Y1JMRGlzdHJpYnV0aW9uUG9pbnSGQ
    2h0dHA6Ly9jcmwuZ3VpZGVjbG90aGluZy5sb2NhbC9jcmxkL0d1aWRlQ2xvdGhpbmctQVBQU0VSVkVSMS
    1DQS5jcmwwgdUGCCsGAQUFBwEBBIHIMIHFMIHCBggrBgEFBQcwAoaBtWxkYXA6Ly8vQ049R3VpZGVDbG9
    0aGluZy1BUFBTRVJWRVIxLUNBLENOPUFJQSxDTj1QdWJsaWMlMjBLZXklMjBTZXJ2aWNlcyxDTj1TZXJ2
    aWNlcyxDTj1Db25maWd1cmF0aW9uLERDPUd1aWRlQ2xvdGhpbmcsREM9bG9jYWw/Y0FDZXJ0aWZpY2F0Z
    T9iYXNlP29iamVjdENsYXNzPWNlcnRpZmljYXRpb25BdXRob3JpdHkwDQYJKoZIhvcNAQEFBQADggEBAD
    87GUPi02czEMO2Op0CeKBBpGwsfjYR9+RlC2uKAoH8PbWAxYNP3Ke6BtPeFy+95GGAJd5Z0+6LpO/AagA
    +zeY/tocZQjy0pYaU4/TPZgD+ZB/8sU982msu+8waO316ipBcf/87n9ZW3Jjk5DcVbtwrZErrGRe9DEn8
    QArN0jroLfaRtbDumse1Lp76+dxFuVhlLWcUXtIKaxm+UU9DS94EwJMtN54lDm3EG6hVdiGUR7TYqZU0K
    HGm7HciIhuO+2rhAazOBiIAAW6wZRUpFKZONSVD6bKrQCzL12LvynQ7XC6Itgr4JGzNCmoN43dXwVCkWo
    amTDdZY4h+QBqUvvY=}
    AuthMetadataUrl : https://lyncserver2.domainname.local/metadata/json/1
    Realm : domainname.local
    UseAuthServer : False
    AcceptSecurityIdentifierInformation : True
    LinkedAccount : domainname.local/Users/LyncEnterprise-ApplicationAccount
    IssuerIdentifier :
    AppOnlyPermissions :
    ActAsPermissions :
    AdminDisplayName :
    ExchangeVersion : 0.20 (15.0.0.0)
    Name : LyncEnterprise-786f61476b634278a3c9b9e4ec08b660
    DistinguishedName : CN=LyncEnterprise-786f61476b634278a3c9b9e4ec08b660,CN=Partner
    Applications,CN=Auth Configuration,CN=domainname,CN=Microsoft
    Exchange,CN=Services,CN=Configuration,DC=domainname,DC=local
    Identity : LyncEnterprise-786f61476b634278a3c9b9e4ec08b660
    Guid : 07495125-ccd4-4443-82d9-74fc3b955cdf
    ObjectCategory : domainname.local/Configuration/Schema/ms-Exch-Auth-Partner-Application
    ObjectClass : {top, msExchAuthPartnerApplication}
    WhenChanged : 10/01/2015 17:14:55
    WhenCreated : 10/01/2015 17:14:55
    WhenChangedUTC : 10/01/2015 17:14:55
    WhenCreatedUTC : 10/01/2015 17:14:55
    OrganizationId :
    Id : LyncEnterprise-786f61476b634278a3c9b9e4ec08b660
    OriginatingServer : DomServer2.domainname.local
    IsValid : True
    ObjectState : Unchanged

  • Essbase 11.1.2.1 Configuration Issue

    Hi ,
    I am using windows xp 32 bit processor and installed Essbase 11.1.2.1 successfully.
    Configured with one Oracle 11g data base user/Schema working fine and also tried to configure with Two Users/Schemas
    in another system workig fine.I heard that if we configure only with one schema Essbase components and Shared
    services will conflict.so I would like to know with how many users we have to configure only Hyperion Essbase to get
    Better Performance.
    Regards
    Sekhar.

    Hi John,
    Then shall i proceed with one user/schema ?
    If i proceed with two users/schema is there any problem will come or not ?
    Is there any order to configure with one schema ?
    like all Foundation components first after Essbase components.
    Number of schema/users consideration is not an issue to me but i need best configured
    Essbase Server without facing configuration issues in Future.
    I had doubt on it may expect clarification ?
    Regards
    Sekhar

  • OC4J Configuration issue Oracle 11g R2 Windows XP and Windows 7

    Hallo!I have installed Oracle Database 11.2.0.1.0 on both Windows XP and Windows 7 on 2 different machines.
    Before installing on both OSs,I had installed Microsoft Loopback Adapter and had set hostname as JOEY-PC and IP address 192.168.0.X.Once the installations were complete and I restarted the machines,I could not start OEM and the error below appears
    C:\Documents and Settings\JOEY>emctl start dbconsole
    OC4J Configuration issue. C:\app\JOEY\product\11.2.0\dbhome_1/oc4j/j2ee/OC4J_DBConsole_JOEY-PC_orcl not found.
    When I went to the C:\app\JOEY\product\11.2.0\dbhome_1\oc4j\j2ee directory,I found the folder OC4J_DBConsole_localhost_orcl instead of OC4J_DBConsole_JOEY-PC_orcl.
    I assumed that by using Microsoft Loopback Adapter,I would avoid the error above and that the OC4J_DBConsole folder would permanently remain as OC4J_DBConsole_JOEY-PC_orcl instead of OC4J_DBConsole_localhost_orcl.
    Why is this folder changing its name and how can I resolve this issue?
    Thanks.

    Pl post the contents of the file C:\WINDOWS\System32\drivers\etc\hosts on both servers
    What steps did you take to set the hostname to JOEY-PC ?
    Srini

Maybe you are looking for

  • PCI-E Audio Sounds Terrible?

    For years I have been using an X-Fi Platinum PCI card and have been very happy with it. This past August it died and I decided to replace it, and do away with my SLI rig. I purchased an EVGA GTX 760 4G FTW video card and a Recon 3D Fatality Champion

  • Browse (Firefox) crashing when Flash Player enabled

    Hello, i'm JoLLDS VOLPE and i'm having trouble with Flash Player Before i format my PC, the flash player (nd the Google Chrome, keep reading for understand this part ) was all fine, not having trouble. I formatted my PC because the very low spce in d

  • How to use BRF plus application in abap programs (Report or Module pool)

    Hi All, I have created an BRF plus application through FDT_WORKBENCH to calculate bonus of the employee with the help of SDN tutorial. Now my concern is that how can i use this application in my report. I have also read in the tutorial that we can cr

  • How do I configure an enterprise application using Weblogic 10 wlconfig

    Hi All, I am converting an installer from WL8 to WL10. We use wlconfig to configure our EAR in wl8 with several wlconfig commands. These don't seem to work though when attempting to use wl10. The following error comes up more often than not and does

  • T 43 dual boot OS choices

    Can anybody assist me with my T 43 OS choice menu during boot up. I had partitioned for two OS, windows XP and 2000 and now only reformatted one partition for storage and only use Win 2K.  However during boot I still get the choice menu for both XP a