Starting Server with SSL Enabled

I want to start iplanet directory server 5.1 with SSL Enabled, but It always ask me PIN Token.
I write slapd-test-pin.txt file as following :
slapd-test-pin.txt
-------begin-----------
Token:test123456
-------end ------------
I put the slapd-test-pin.txt into /usr/iplanet/server/alias
then, I restart directory server from command line.
/usr/iplanet/servers/slapd-test/stop-slapd
/usr/iplanet/servers/slapd-test/start-slapd
What's wrong ?
Thank you !!!!

I have a similar problem. I actually do set the correct format of certidcate db password file but the server stll does not start but reports the following:
[26/Sep/2003:17:21:11 -0400] - Sun-ONE-Directory/5.2 B2003.143.0014 (32-bit) starting up
[26/Sep/2003:17:21:11 -0400] - ERROR<12362> - Connection - conn=-1 op=-1 msgId=-1 - PR_Bind() on address <all interfaces> port <636> failed : error -5966 (Access Denied.).
I installed the certificate correctly. It was obtained from VeriSign with a ds 5.2 generated request.
Any ideas?
Thanks in advance!

Similar Messages

  • WCF service fronted with SSL enabled NGINX load balancer shows HTTP based WSDL url instead of HTTPS

    Hi,
    I have WCF service hosted using IIS 8.5 on application server. And application servers are fronted with NGINX load balancer with SSL enabled. Backend communication protocol between NGINX to application server is http. 
    When customer visits public domain url (https://xxx.com/service.svc), they can see the WSDL url with http://xxx.com/service.svc?wsdl. 
    What change should I make so that WSDL url will have https instead of http ? 
    This is service side configuration.
    <system.serviceModel>
        <services>
          <service name="Service.IService">
            <endpoint address="" binding="basicHttpBinding" bindingNamespace="http://xyz.com/Service" name="Service_Endpoint" contract="Service.IService" />
          </service>
        </services>
        <bindings>
          <basicHttpBinding />
        </bindings>
        <client />
        <behaviors>
          <serviceBehaviors>
            <behavior>
              <serviceThrottling maxConcurrentCalls="5000" maxConcurrentInstances="2147483647" maxConcurrentSessions="5000" />
              <serviceMetadata httpGetEnabled="true" />
              <serviceDebug includeExceptionDetailInFaults="true" />
            </behavior>
          </serviceBehaviors>
        </behaviors>
        <serviceHostingEnvironment multipleSiteBindingsEnabled="true" />
      </system.serviceModel>
    Thanks in advance !!

    Hi,
    For this scenario, you could just enable SSL in IIS to get HTTPS endpoints. If your service is exposed at https then you configure the same using “httpsGetEnabled”:
    <behaviors>
    <serviceBehaviors>
    <behavior
    name="MyServiceTypeBehaviors"
    >
    <serviceMetadata
    httpGetEnabled="true"
    />
         </behavior>
    </serviceBehaviors>
    </behaviors>
    For more information, you could refer to:
    http://www.codeproject.com/Articles/327260/What-s-new-in-WCF-Automatic-HTTPS-endpoint-for
    http://blogs.msdn.com/b/brajens/archive/2007/04/26/accessing-description-metadata-wsdl-of-wcf-web-service.aspx
    Regards

  • ORA-12699: error when connecting to server with FIPS enabled

    Hi all,
    I have a oracle client and server with FIPS enabled on them. When I use SQL Developer from the client, I can connect to the server and run queries on them.
    I have an ADO based application, which I am trying to run on the client to query the oracle server, but the open database call seems to fail on this with the ORA-12699 error ..
    Heres the connection string I am using ... "Provider=OraOLEDB.Oracle;Data Source=Test;User Id=scott;Password=tiger;"
    Are there any other options to be added to the connection string string ?? any ideas / comments would be of great help ...
    Note : I am using Oracle 11G ..
    --sachi                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           

    Naveen,
    Forms 5.0 is not certified and not tested with Oracle DB 10g because it was desupported before 10g got released.
    The other problem is hard to give a generic answer for and I suggest to address this to metalink.oracle.com
    Frank

  • Epm Inplace upgradation with SSL enabled

    Hello Experts,
    We have plan to inplace upgradation of  hyperion product 933 to EPM 122 with SSL enabled.
    My questions regarding to this concerns are:-
    1)Is it possible to make inplace upgradation 933 to 122 with SSL enabled?
    2)What will be the risks for this plan
    3)And suggest pros and cons for this
    Please reply my questions soon.. and suggest me what will be better,Suggest ideas for this.
    Thanks in advance,

    980137 wrote:
    Please reply my questions soon.. and suggest me what will be better,Suggest ideas for this.
    I think you should discuss your upgrade options with a consultant instead of trying to get answers to those sort of questions on a forum.
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • How do i restart slapd with SSL enabled?

    I am running 5.2 with patch 3 for solaris 8. I want to restart slapd using the restart-slapd command. However the problem is, with SSL enabled, I need to manually intervene and enter in the token password. Is there any way to get around this?
    This wouldnt be an issue if i didnt have to automate the slapd restarts.
    Thanks.
    -Sowser

    If you haven't already, create a file as <serverRoot>/alias/slapd-<instance>-pin.txt and add the following to it
    Internal (Software) Token:yourcertdbpasswd
    Once done you will be able to avoid any manual intervention. This procedure is documented in the Admin guide

  • Problem starting server with nodemanager

    Hello,
    I have a cluster running on JRockit on Windows 2003 sever and everything works fine when I start nodes from command line, but when I try to start cluster nodes from admin console through node managers in the log file I get:
    =================
    <Jul 21, 2006 10:50:57 AM> <Info> <NodeManager> <Starting WebLogic server with command line: C:\bea\JROCKI~1\jre\bin\java -Dweblogic.Name=Alfa1 -Djava.security.policy=C:\bea\WEBLOG~1\server\lib\weblogic.policy -Dweblogic.management.server=http://141.146.8.111:7001 -Djava.library.path=C:\bea\WEBLOG~1\server\bin;.;C:\WINDOWS\system32;C:\WINDOWS;C:\bea\WEBLOG~1\server\native\win\32;C:\bea\WEBLOG~1\server\bin;C:\bea\JROCKI~1\jre\bin;C:\bea\JROCKI~1\bin;C:\bea\WEBLOG~1\server\native\win\32\oci920_8;c:\program files\imagemagick-6.2.8-q16;C:\Program Files\Support Tools\;C:\Program Files\Windows Resource Kits\Tools\;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\Microsoft SQL Server\80\Tools\Binn\ -Djava.class.path=.;C:\bea\patch_weblogic910\profiles\default\sys_manifest_classpath\weblogic_patch.jar;C:\bea\JROCKI~1\lib\tools.jar;C:\bea\WEBLOG~1\server\lib\weblogic_sp.jar;C:\bea\WEBLOG~1\server\lib\weblogic.jar;C:\bea\WEBLOG~1\server\lib\webservices.jar -Dweblogic.system.BootIdentityFile=C:\bea\user_projects\domains\alfa_domain2\servers\Alfa1\data\nodemanager\boot.properties -Dweblogic.nodemanager.ServiceEnabled=true -Dweblogic.security.SSL.ignoreHostnameVerification=false -Dweblogic.ReverseDNSAllowed=false weblogic.Server >
    <Jul 21, 2006 10:50:57 AM> <Info> <NodeManager> <Working directory is "C:\bea\user_projects\domains\alfa_domain2">
    <Jul 21, 2006 10:50:57 AM> <Info> <NodeManager> <Server output log file is "C:\bea\user_projects\domains\alfa_domain2\servers\Alfa1\logs\Alfa1.out">
    Usage: java [-options] class [args...]
    (to execute a class)
    or java [-options] -jar jarfile [args...]
    (to execute a jar file)
    where options include:
    -jrockit     to select the "jrockit" VM
    -client     to select the "client" VM
    -server     to select the "server" VM [synonym for the "jrockit" VM]
    The default VM is jrockit.
    -cp <class search path of directories and zip/jar files>
    -classpath <class search path of directories and zip/jar files>
    A ; separated list of directories, JAR archives,
    and ZIP archives to search for class files.
    -D<name>=<value>
    set a system property
    -verbose[:class|gc|jni]
    enable verbose output
    -version print product version and exit
    -version:<value>
    require the specified version to run
    -showversion print product version and continue
    -jre-restrict-search | -jre-no-restrict-search
    include/exclude user private JREs in the version search
    -? -help print this help message
    -X print help on non-standard options
    -ea[:<packagename>...|:<classname>]
    -enableassertions[:<packagename>...|:<classname>]
    enable assertions
    -da[:<packagename>...|:<classname>]
    -disableassertions[:<packagename>...|:<classname>]
    disable assertions
    -esa | -enablesystemassertions
    enable system assertions
    -dsa | -disablesystemassertions
    disable system assertions
    -agentlib:<libname>[=<options>]
    load native agent library <libname>, e.g. -agentlib:hprof
    see also, -agentlib:jdwp=help and -agentlib:hprof=help
    -agentpath:<pathname>[=<options>]
    load native agent library by full pathname
    -javaagent:<jarpath>[=<options>]
    load Java programming language agent, see java.lang.instrument
    <Jul 21, 2006 10:50:59 AM> <Info> <NodeManager> <Server failed during startup so will not be restarted>
    ==============
    It seems that node manager appends system PATH to the java.library.path of the server it is trying to start. The problem is spaces in the system PATH:
    -Djava.library.path=C:\bea\WEBLOG~1\server\bin;.;C:\WINDOWS\system32;C:\WINDOWS;C:\bea\WEBLOG~1\server\native\win\32;C:\bea\WEBLOG~1\server\bin;C:\bea\JROCKI~1\jre\bin;C:\bea\JROCKI~1\bin;C:\bea\WEBLOG~1\server\native\win\32\oci920_8;c:\program files\imagemagick-6.2.8-q16;C:\Program Files\Support Tools\;C:\Program Files\Windows Resource Kits\Tools\;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\Microsoft SQL Server\80\Tools\Binn\
    java expects another option after space.
    How do I make nodemanager not to append system path to server's java.library.path?
    Is there a way to make node manager start server nodes with java.library.path value in quotation marks?
    P.S. I'm running node manager as windows service. I saw a post that solves this problem by starting node manager from command line but this solution is not sufficient.

    Gediminas Aleknavicius skrev:
    How do I make nodemanager not to append system path to server's java.library.path?Hi!
    This news group is about JRockit. People here tend not to know that
    much about non-JRockit products (like nodemanager). Try some WLx forum,
    they should be able to answer your question!
    Regards //Johan

  • Urgent JMS issue with SSL-enabled cluster

    Hello, dear All!
    We have deployed a SAP WebAS SP13 SSL-enabled cluster (2 servers) and face the following strange behaviour:
    When both servers are running our queue-based message driven beans (MDB EJBs) never get any messages.
    However, JMS topic subscriber threads (not implemented as MDBs) work fine on both servers and receive JMS broadcasts. As well web-initiated JMS queue browsing works fine.
    Then if only one (central) server is up, queue-based MDBs work fine and start receiving messages...
    If you know or guess what might be an issue it would be greatly appreciated!
    Thank you and best regards,
    -Yuri

    Hi!
    Yes, I solved this problem. You have to set your certificate to the LDAP server and get SSL enabled. You should also add same certificate to your jdk's cacerts file. That should help. :)
    Janne

  • Facing issue when LDAPSync is enabled for OIM-AD integration with SSL enabled

    Hi
    We are performing LDAPSync for OIM AD real time sync.We have done all configuration as per oracle documentation on LDAPSync for OIM 11gR2 : http://docs.oracle.com/cd/E27559_01/integration.1112/e27123/oid_oim.htm The OIM environment we tested is the latest OIM version OIM 11gR2 PS1 (11.1.2.1.0).
    WE have performed LDAPSync enablement on postinstallation of OIM .So we dont have OVD , we have configured libOVD as mentioned in this doc.
    We have performed following  steps mentioned in this document  in our OIM environment.
    3.1 Enabling Post installation LDAP Synchronization
    3.3 Creating Identity Virtualization Library (libOVD) Adapters and Integrating With Oracle Identity Manager
    As attribute like password  might be not getting updated in AD from OIM , we have configured SSL enabled integration in LDAP sync as mentioned in above document.
    We implemented this step  3.4.1 Enabling SSL Between Identity Virtualization Library (libOVD) and Microsoft Active Directory,
    but here it is not properly mentioned that about how to import public key certificate of AD into OIM envirioment for SSL.
    We are getting following error message in logs : Looking at logs it looks like the import of AD SSL certificate did not happen properly in OIM environment. But ,we have imported it using keytool and OVD keystore ...please let us know if we are missing any configuration in this process.Above oracle document is not pretty clear on this.
    <Dec 7, 2013 12:22:53 AM IST> <Warning> <oracle.ods.virtualization.engine.backend.jndi.LDAP2.BackendJNDI> <OVD-40118> <Could not automatically detect binary attribute list: simple bind failed: 10.88.164.231:636.>
    <Dec 7, 2013 12:22:53 AM IST> <Warning> <oracle.ods.virtualization.engine.backend.jndi.LDAP2.JNDIConnectionPool> <OVD-60024> <Connection error: simple bind failed: 10.88.164.231:636.>
    <Dec 7, 2013 12:22:53 AM IST> <Error> <oracle.ods.virtualization.engine.backend.jndi.LDAP2.BackendJNDI> <OVD-60143> <[#LDAP2]  Unable to create connection to ldap://[10.88.164.231]:636 as null.
    javax.naming.CommunicationException: simple bind failed: 10.88.164.231:636 [Root exception is javax.net.ssl.SSLException: java.lang.RuntimeException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty]
    at com.sun.jndi.ldap.LdapClient.authenticate(LdapClient.java:195)
    at com.sun.jndi.ldap.LdapCtx.connect(LdapCtx.java:2720)
    at com.sun.jndi.ldap.LdapCtx.<init>(LdapCtx.java:296)
    at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(LdapCtxFactory.java:175)
    at com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(LdapCtxFactory.java:193)
    at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(LdapCtxFactory.java:136)
    at com.sun.jndi.ldap.LdapCtxFactory.getInitialContext(LdapCtxFactory.java:66)
    at javax.naming.spi.NamingManager.getInitialContext(NamingManager.java:667)
    at javax.naming.InitialContext.getDefaultInitCtx(InitialContext.java:288)
    at javax.naming.InitialContext.init(InitialContext.java:223)
    at javax.naming.ldap.InitialLdapContext.<init>(InitialLdapContext.java:134)
    at oracle.ods.virtualization.engine.backend.jndi.JNDIConnectionPool.createCtx(JNDIConnectionPool.java:463)
    at oracle.ods.virtualization.engine.backend.jndi.JNDIConnectionPool.create(JNDIConnectionPool.java:494)
    at oracle.ods.virtualization.engine.backend.jndi.JNDIConnectionPool.<init>(JNDIConnectionPool.java:156)
    at oracle.ods.virtualization.engine.backend.jndi.RemoteServer.getJNDIConnectionPool(RemoteServer.java:163)
    at oracle.ods.virtualization.engine.backend.jndi.BackendJNDI.getLDAPContext(BackendJNDI.java:984)
    at oracle.ods.virtualization.engine.backend.jndi.BackendJNDI.getConnection(BackendJNDI.java:927)
    at oracle.ods.virtualization.engine.backend.jndi.ConnectionHandle.getHolder(ConnectionHandle.java:415)
    at oracle.ods.virtualization.engine.backend.jndi.ConnectionHandle.search(ConnectionHandle.java:250)
    at oracle.ods.virtualization.engine.backend.jndi.JNDIEntrySet.initialize(JNDIEntrySet.java:219)
    at oracle.ods.virtualization.engine.backend.jndi.BackendJNDI.get(BackendJNDI.java:728)
    at oracle.ods.virtualization.engine.chain.Chain.nextGet(Chain.java:303)
    at oracle.ods.virtualization.engine.chain.BasePlugin.get(BasePlugin.java:89)
    at oracle.ods.virtualization.engine.chain.Chain.nextGet(Chain.java:314)
    at oracle.ods.virtualization.engine.chain.BasePlugin.get(BasePlugin.java:89)
    at oracle.ods.virtualization.engine.chain.plugins.usermanagement.UserManagement.get(UserManagement.java:742)
    at oracle.ods.virtualization.engine.chain.Chain.nextGet(Chain.java:314)
    at oracle.ods.virtualization.engine.chain.PluginChain.runGet(PluginChain.java:211)
    at oracle.ods.virtualization.engine.chain.PluginManager.runGet(PluginManager.java:351)
    at oracle.ods.virtualization.engine.chain.PluginManager.runGet(PluginManager.java:316)
    ...more
    Caused By: javax.net.ssl.SSLException: java.lang.RuntimeException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty
    at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:190)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1731)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1692)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.handleException(SSLSocketImpl.java:1675)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.handleException(SSLSocketImpl.java:1601)
    at com.sun.net.ssl.internal.ssl.AppOutputStream.write(AppOutputStream.java:94)
    at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:65)
    at java.io.BufferedOutputStream.flush(BufferedOutputStream.java:123)
    at com.sun.jndi.ldap.Connection.writeRequest(Connection.java:414)
    at com.sun.jndi.ldap.Connection.writeRequest(Connection.java:387)
    at com.sun.jndi.ldap.LdapClient.ldapBind(LdapClient.java:332)
    at com.sun.jndi.ldap.LdapClient.authenticate(LdapClient.java:190)
    at com.sun.jndi.ldap.LdapCtx.connect(LdapCtx.java:2720)
    at com.sun.jndi.ldap.LdapCtx.<init>(LdapCtx.java:296)
    at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(LdapCtxFactory.java:175)
    at com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(LdapCtxFactory.java:193)
    at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(LdapCtxFactory.java:136)
    at com.sun.jndi.ldap.LdapCtxFactory.getInitialContext(LdapCtxFactory.java:66)
    at javax.naming.spi.NamingManager.getInitialContext(NamingManager.java:667)
    at javax.naming.InitialContext.getDefaultInitCtx(InitialContext.java:288)
    at javax.naming.InitialContext.init(InitialContext.java:223)
    at javax.naming.ldap.InitialLdapContext.<init>(InitialLdapContext.java:134)
    at oracle.ods.virtualization.engine.backend.jndi.JNDIConnectionPool.createCtx(JNDIConnectionPool.java:463)
    at oracle.ods.virtualization.engine.backend.jndi.JNDIConnectionPool.create(JNDIConnectionPool.java:494)
    at oracle.ods.virtualization.engine.backend.jndi.JNDIConnectionPool.<init>(JNDIConnectionPool.java:156)
    at oracle.ods.virtualization.engine.backend.jndi.RemoteServer.getJNDIConnectionPool(RemoteServer.java:163)
    at oracle.ods.virtualization.engine.backend.jndi.BackendJNDI.getLDAPContext(BackendJNDI.java:984)
    at oracle.ods.virtualization.engine.backend.jndi.BackendJNDI.getConnection(BackendJNDI.java:927)
    ...more
    Caused By: java.lang.RuntimeException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty
    at sun.security.validator.PKIXValidator.<init>(PKIXValidator.java:57)
    at sun.security.validator.Validator.getInstance(Validator.java:161)
    at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.getValidator(X509TrustManagerImpl.java:108)
    at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:204)
    at oracle.ods.virtualization.engine.util.OVDTrustManager.checkServerTrusted(OVDTrustManager.java:99)
    at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1198)
    at com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:136)
    at com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:593)
    at com.sun.net.ssl.internal.ssl.Handshaker.process_record(Handshaker.java:529)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:925)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1170)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.writeRecord(SSLSocketImpl.java:637)
    at com.sun.net.ssl.internal.ssl.AppOutputStream.write(AppOutputStream.java:89)
    at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:65)
    Let us know for any helpful pointers on this
    Thanks in advance,
    RPB25

    Use the steps given below to perform import public key certificate of AD into OIM envirioment for SSL
    Obtain the AD Certificates from the AD Administrator.
    Copy the AD Certificates to the directory /jrockit-jdk1.6.0_20/jre/lib/security
    Run the following command to import all the certificates
    /jrockit-jdk1.6.0_20/bin/keytool -import -alias <provide_alias> -file <file-name> -keystorecacerts -storepasschangeit
      4. The CA certificates are now present in the trust store.

  • Steps to configure Weblogic 10.3 with SSL enabled Sybase 12.5

    In WLS 10.3, there is a new feature for supporting the SSL encryption on Sybase 12.5.4.
    I want to connect from Weblogic 10.3 to the SSL enabled Sybase 12.5.4.
    Can any one please provide the step by step instructions for how to configure on the Weblogic 10.3? Do I need to create any custom class for this?
    Thanks

    Here is an example of connecting using the Sybase driver.
    SybDriver sybDriver = (SybDriver)
        Class.forName("com.sybase.jdbc3.jdbc.SybDriver").newInstance();
    sybDriver.setVersion(com.sybase.jdbcx.SybDriver.VERSION_6);
    DriverManager.registerDriver(sybDriver);
    Connection conn = DriverManager.getConnection
        ("jdbc:sybase:Tds:<host>:5000?ServiceName=<dbname>",<user>,<passwd>);Not sure that the setVersion() call is absolutely necessary.

  • Starting Admin Server with SSL as Windows service

    Using Admin Server 5.2, SP3:
    How (or can) I start the admin server as windows service after enabling SSL? When I try to start it as a service, I get prompted with a dialog box for the cert/key database password, but I want this start seemlessly. I tried creating a text file containing the password (as advised for normal directory server) - of the form: admin-serv-<inst>-pin.txt in the /alias subdirectory, containing the line "internal (software) Token:<password>", but this did not work - I still get the dialog box prompt.
    Do I need to put this password file somewhere else? Do I need tweak something to make this work? Or is it impossible to start the admin server seemlessly as a service after enabling SSL?
    Thx.
    R

    Hi Gary-
    Thanks for responding. I tried making the file read-only in Windows, but it yielded the same result. I also tried different combinations of removing spaces and new-line inside the file, all to no avail.
    I think this is a different beast than the slapd server - the admin server is actually an 'ns-httpd' process; Since I saw that this was the case, I also tried updating the <server-root>\admin-serv\config\magnus.conf by adding an SSLPassPhraseDialog directive to a command that echo'ed back the password, but I just got a warning that this directive was ignored.
    Any other thoughts? Does anyone else even try securing the admin server?

  • Problem in starting server with native mode enabled in jcom tab

    Hi
    I am trying to use com component using jcom
    For this
    As per the document I enebled Enable com option under Servers -> Protocol ->Jcom
    tab
    I also wnat to enable the Native mode..
    But when I eneble native mode server is not starting up
    It is giving following exception
    java.lang.RuntimeException: RegSetValueEx failed
         at com.linar.jintegra.NativeObjectProxy.registerJvm(Native Method)
         at com.linar.jintegra.Jvm.register(Jvm.java:202)
         at weblogic.com.COMService.initialize(COMService.java:68)
         at weblogic.t3.srvr.SubsystemManager.initialize(SubsystemManager.java:118)
         at weblogic.t3.srvr.T3Srvr.initializeHere(T3Srvr.java:893)
         at weblogic.t3.srvr.T3Srvr.initialize(T3Srvr.java:664)
         at weblogic.t3.srvr.T3Srvr.run(T3Srvr.java:342)
         at weblogic.Server.main(Server.java:32)
    Can someone help to to enable this jcom native mode
    Thanx in advance
    Manish Rathi

    I get the same problem. I don't expect we'll get any answers here.
    "Manish" <[email protected]> wrote:
    >
    Hi
    I am trying to use com component using jcom
    For this
    As per the document I enebled Enable com option under Servers -> Protocol
    ->Jcom
    tab
    I also wnat to enable the Native mode..
    But when I eneble native mode server is not starting up
    It is giving following exception
    java.lang.RuntimeException: RegSetValueEx failed
         at com.linar.jintegra.NativeObjectProxy.registerJvm(Native Method)
         at com.linar.jintegra.Jvm.register(Jvm.java:202)
         at weblogic.com.COMService.initialize(COMService.java:68)
         at weblogic.t3.srvr.SubsystemManager.initialize(SubsystemManager.java:118)
         at weblogic.t3.srvr.T3Srvr.initializeHere(T3Srvr.java:893)
         at weblogic.t3.srvr.T3Srvr.initialize(T3Srvr.java:664)
         at weblogic.t3.srvr.T3Srvr.run(T3Srvr.java:342)
         at weblogic.Server.main(Server.java:32)
    Can someone help to to enable this jcom native mode
    Thanx in advance
    Manish Rathi

  • Setting up Mail Server with SSL

    Hey guys,
    Unless I'm missing some fundamental stuff, I'm having some nasty problems getting SSL to work with OS X Server 10.4 Mail. As of right now, I have it working with Apache without a problem using a nopass key and the other required files.. I have:
    domain.crt
    domain.csr
    domain.key
    domain.nopass.key
    gd_intermediate.chcrt
    Now when I try going into server admin and simply using the crt, key and chcrt and enabling IMAP/POP and/or SMTP:
    SMTP just stops working and hangs all together.
    IMAP and POP via SSL I've gotten working but i get the "not signed certificate" window that pops up.
    Also, when this started, I noticed that upon changing the settings, mail would stop working all together, but I did read a bit about a line that shows up in /etc/imapd.conf:
    tlscommonname:
    which causes mail to hang, and I've learned to delete that/comment it out.
    Is there a way to easily set this up/can i do it via command line via imapd.conf and main.cf?

    Hello,
    I have an IMAP email address with lots of folders in it and filters on the server that route the emails to a specific folder by different rules.
    Does anybody have any idea about how could I make the email application show all the folders in my inbox? By default I can only see the emails in my inbox and that is useless because most of the important emails go into folders and this application doesn't synchronize the folders. I have to go into each folder by selecting the more folders option and only then it searches for new email, but when you have around 30 folders it's kind of time consuming to select "more folders", navigate to a folder go into that specific folder and see if you've got any mail. Not to mention the stupid sorting options at the right which can't be removed and every time you open the email it goes to the default date setting and it's showing the email divided into days. Who thought that would be useful?
    I've also had an e66 and the mail application worked flawlessly ( you could see all the folders, how many unread messages you had in each folder, the emails sorted by date with the unread messages first).
    Does anybody know a good email application that can be installed on this phone, or how could I install the old email application (e66, e71), which for me worked perfectly.
    Thank you.

  • How do I bind to directory server with SSL and authentication?

    I'm running Lion Server 10.7.3, Open Directory master. In Open Directory/Settings/LDAP, I've checked the box to Enable SSL and selected a (self-signed) certificate. In Policies/Binding, I've checked the box to Enable Authenticated Directory Binding.
    Testing with a client computer on which Snow Leopard has been freshly installed and fully updated, I went to System Prefs/Accounts to bind to the new directory server. The good news is, the binding was successful, and when the client initiates an AFP connection with the server, it uses Kerberos, creating a ticket as expected. (Which doesn't work with Lion clients, alas, but that's a seperate matter.)
    Here are the problems:
    1) It looks like the binding did not use SSL. By which I mean that when I opened Directory Utility and examined the LDAPv3 entry, the SSL checkbox was not checked. (If I then check the box, everything looks fine until I restart the client, after which I have a red dot. So I'm guessing that checking the box does nothing until after restart, and that it breaks the binding.)
    2) I was never prompted to authenticate for the directory binding.
    So I get that literally I'm *enabling* SSL and Authenticated Directory Binding, but it seems like the defaults are to bind without SSL or authentication, and there's no obvious-to-me way to force the binding to use those things. How do I do that?
    What I'd really like to do is *require* SSL and Authenticated Directory Binding. I want this because my belief (correct me if I'm wrong) is that if authentication is required to bind to the server, no one will be able to bind to my server without my permission, and that SSL offers a more secure connection to my server than not-SSL. How do I require these things, or do I not really want to?
    Thank you.

    You cannot connect to databases via Muse at the moment. Please refer: http://forums.adobe.com/message/5090145#5090145
    Cheers,
    Vikas

  • Error starting Server with Clustering License

              Hello
              I was using WebLogic Application server ver 6.0 evaluation copy
              and everything was working fine. When I have updated the license
              to use the clustering capabilities of Weblogice server , I was
              not able to start the weblogic server and the server was throwing
              following exception.
              Throwable: weblogic.server.ServiceFailureException: Cluster service
              - with nestd exception:
              [java.net.SocketException: Unknown error]
              weblogic.server.ServiceFailureException: Cluster service - with
              nested exception:
              [java.net.SocketException: Unknown error]
              at weblogic.t3.srvr.T3Srvr.start(T3Srvr.java:446)
              at weblogic.t3.srvr.T3Srvr.run(T3Srvr.java:170)
              at weblogic.Server.main(Server.java:35)
              '>
              I haven't configured any cluster on my server.
              Do I have to do anything beside running upgradeLicense command
              using the new locense. Is there anything I am missing here.
              Thanks in Advance
              Sunil
              

    Just to be clear, the WLS 6.0 software downloaded from the web site is
              the full product and supports clustering, in-memory replication, etc.
              The evaluation license packaged with the software does not provide keys
              to enable these features. To evaluate these features, you need to
              contact your BEA sales person to get a license to turn these features
              on.
              Kent Kong wrote:
              > hi ,
              > If your wls6.0 is downloaded from the website of bea, it doesnot
              > support cluster service.
              > You should ask our sales for a complete one.
              >
              > Otherwise ,maybe the version of the server in your cluster
              > is not the same.
              >
              > Kent Kong
              

  • Setup automated Powershell to upload files to a remote ftp server with ssl

    Thanks in advance for the advice!
    I need to create a script to upload a file to a remote server to transfer some large files, and I've been reviewing some methods needed, and have a few questions.
    Is there a best practice for sending large files? 
    Is the webrequest or put commands better to use?
    This will be the first time we use Powershell on this server.   Should I change the executive policy on the server or should I change it in the script when running for security purposes?   This is a data warehouse therefore our strategic
    data is else where but want to make sure everything is secure as possible.
    I am able to run something similar on my laptop which works but when I try it on the server it is blocked.   I'm assuming I'll have to open up port 22 for this application to work.   How can I confirm that this is the port Powershell
    needs open for these transfers. 
    Any references to learning links appreciated since I'm new to Powershell.
    Thanks!

    Sorry but we cannot help you with this.  We suggest you contact a support tech or consultant to help you set up your system.
    Start by learning how PowerShell works and how to set it up. As fro the SSL you will need to postyourscript with any issues and errors.
    Start here:
    http://technet.microsoft.com/en-us/scriptcenter/dd793612.aspx
    ¯\_(ツ)_/¯

Maybe you are looking for