Active Directory 2003 and Sun One Directory Server 5.2

I just installed Sun One Directory Server 5.2 on a Linux machine. I want to configure LDAP on that machine so that it can be authenticated on Active Directory 2003. How do I go about doing this?

Active Directory server is a "directory server" (and kerberos server.) If your linux client authenticates against Active Directory it doesn't have to involve the Sun Directory Server at all. You have several general approaches you could investigate:
1. Linux client gets accounts and and authentication via LDAP from Active Directory
If you use AD to handle unix LDAP authentication (opt 1) you may need to extend schema in AD to add the unix password field. I haven't tried it yet, but hope to.
2. Linux client gets accounts from AD LDAP and authorization from AD Kerberos.
There should be docs on support.microsoft.com on enabling kerberos support for non-Win clients.
3. Linux client (with samba client installed, with winbind or pam_smb to support unix level services) gets accounts and authentication as a "Windows" client from Active directory "Windows server"
Check the samba.org docn or forums- I think this is a pretty common solution.
4. Linux client gets account information from Sun Directory server but uses kerberos (against active directory) for authentication.
There should be docs on support.microsoft.com on enabling kerberos support for non-Win clients.
5 Linux client gets account and authorization from Sun Directory server, which the sun Directory server configured to use Active Directory as a Kerberos server.
Probably incredibly complex.

Similar Messages

Help for Installing PHP and Sun One Web Server

Hi
I tried to install PHP 5.1.4 and Sun One Web Server 6.1. I am not able to complete this and got stuck. All the available materials in net seems to flow above my head.
It will be very helpful if someone could let me know the step by step configuration a bit brief for the same.
Thanks in advance
Kathirvel Balakrishnan

Hi Craig
I am following these steps,
1st step : Installing PHP on the WindowsNT server (NT users only)
Copy the php files on your server
Get the php zip file
Copy the php files under a directory (for example : d:php4)
(be careful don't use c:Program Filesphp because of the space between Program and Files
copy php4ts.dll to c:winnt and msvcrt.dll if you don't already have it on your system
Edit php.ini-dist
rename php.ini-dist to php.ini
Edit php.ini : Indicate in which directory you have copied youre php files. (extension_dir = d:php4extensions ; directory in which the loadable extensions (modules) reside.)
copy php.ini in winnt directory (php.ini is parsed in my config)
Matthias Kramer told me that he had to move php.ini to <path-to-netscape-server>/https-servername/config for it to be parsed
Make a file association under Windows NT
In a DOS Window, type assoc .php=PHPScript
ftype PHPScript=d:php4php.exe %1 %*
Test the 1st step
Create a C:test.php file with a single line like <? echo("Nothing to write"); ?>
Create a C:test.bat file with 2 lines test.php
pause
double-clic on test.bat
If you see something like X-Powered-By: PHP/4.0.3
Content-type: text/html
Nothing to write
then the NT association works!!
2nd step : Configuring Netscape Enterprise Server or iPlanet for PHP4 with nsapi (NT & UNIX)
Unix users only
Compile PHP as follows: ./configure --with-nsapi=/usr/local/netscape/server4 --enable-libgcc
make
make install
Add LD_LIBRARY_PATH=<libdir> to your Netscape server startup script
where <libdir> is the full path to the directory where libstdc++.so.2.10.0 is located (usually /usr/local/lib)
Add a mime-type to the Netscape Server
In the Netscape Administration console chose Preferences|Mime Types
Add a new type called magnus-internal/x-httpd-php for exts=php
Click here for screenshot
Stop your Web Server
Make a copy of obj.conf located in: <path-to-netscape-server>/https-servername/config
Modify obj.conf
There are several section in obj.conf
At the end of the Init section of obj.conf (necessarely after mime type init),
place this two lines For NT users
Init fn="load-modules" funcs="php4_init,php4_close,php4_execute,php4_auth_trans" shlib="d:/php4/sapi/php4nsapi.dll"
Init fn="php4_init" errorString="Failed to initialise PHP!"
For Unix users
Init fn="load-modules" funcs="php4_init,php4_close,php4_execute,php4_auth_trans" shlib="/usr/local/netscape/server4/bin/libphp4.so"
Init fn="php4_init" errorString="Failed to initialise PHP!"
In The < Object name="default" > section,
place this line (necessarely after all 'ObjectType' and before all 'AddLog' lines) Service fn="php4_execute" type="magnus-internal/x-httpd-php"
Add a new object called x-httpd-php <Object name="x-httpd-php">
ObjectType fn="force-type" type="magnus-internal/x-httpd-php"
Service fn=php4_execute
</Object>
Restart your Web Server
Test the 2nd step
Put the test.php file in the document root of your server
Then type http://server/test.php
If you can see "nothing to write" in your browser then it works!
AS mentioned in step 1,
I am not getting the PHP message.
I am installing it in my laptop, it has no IP, is that has to do something with this.
Please guide me from here.
Thanks in advance
Kathirvel

Directory Structures in sun one Web Server 6.1

I am struggling to run my j2ee application on newly set up sun one web server 6.1 on my pc.
Can somebody please help me expalining directory structure in detail for sun one web server 6.1?
Where should I place my java beans and it's class files?
what should WEB-INF -> lib folder contains?
I make war file using j2ee deployment tool. Do i need to change anything in web.xml and sun-web.xml?
Thanks in advance.

Thanks chris.
It looks better now. still it gives following errors in error log. I only have java beans not the EJB.
here are the error.
[20/Oct/2003:11:35:59] info ( 632): Internal Info: loading servlet /peoplechannel/SearchLDAPIn.jsp
[20/Oct/2003:11:35:59] warning ( 632): Internal error: newInstance failed (servlet class=_jsps._peoplechannel._SearchLDAPIn_jsp): java.lang.IllegalAccessException: Class com.iplanet.server.http.servlet.NSServletEntity can not access a member of class jsps.peoplechannel._SearchLDAPIn_jsp with modifiers "public"
[20/Oct/2003:11:35:59] warning ( 632): Internal error: Failed to get GenericServlet. (uri=/peoplechannel/SearchLDAPIn.jsp,SCRIPT_NAME=/peoplechannel/SearchLDAPIn.jsp)
what's the syntax to change loading precompiled jsp to force web server to compile jsp?
I really need urgent help.
Thanks,
naimesh

NetBeans and Sun ONE Web Server 6.1

I have a JSP / Beans / Servlet Web application working in Tomcat on my local machine, a Macintosh laptop. I used NetBeans to create it all, and everything works fine there. I have tried to upload everything to another computer (Solaris based) which is running Sun ONE Web Server 6.1, but am having problems.
I uploaded the WAR file that NetBeans created, and uploaded the 'web' directory that NetBeans created. I can access HTML files from that web folder, but when I ask it to go to the first page, index.jsp, it has a problem with the beans. In my JSP file I do:
<jsp:useBean id="db" class="drc.database" scope="session" />
It seems to be having problems loading that class. What do I need to do? Here is the error code:
[04/Aug/2005:17:15:36] fine (15708):      for host 129.147.40.215 trying to GET /index.jsp, ntrans-j2ee reports: mapped uri "/index.jsp" in context "" to resource "jsp"
[04/Aug/2005:17:15:36] fine (15708):      for host 129.147.40.215 trying to GET /index.jsp, service-j2ee reports: context = StandardEngine[null].StandardHost[drc].StandardContext[]
[04/Aug/2005:17:15:36] fine (15708):      for host 129.147.40.215 trying to GET /index.jsp, service-j2ee reports: contextPath =
[04/Aug/2005:17:15:36] fine (15708):      for host 129.147.40.215 trying to GET /index.jsp, service-j2ee reports: wrapper = StandardEngine[null].StandardHost[drc].StandardContext[].StandardWrapper[jsp]
[04/Aug/2005:17:15:36] fine (15708):      for host 129.147.40.215 trying to GET /index.jsp, service-j2ee reports: servletPath = /index.jsp
[04/Aug/2005:17:15:36] fine (15708):      for host 129.147.40.215 trying to GET /index.jsp, service-j2ee reports: pathInfo = null
[04/Aug/2005:17:15:36] info (15708):      for host 129.147.40.215 trying to GET /index.jsp, service-j2ee reports: WEB2798: [] ServletContext.log(): JspEngine --> /index.jsp
[04/Aug/2005:17:15:36] info (15708):      for host 129.147.40.215 trying to GET /index.jsp, service-j2ee reports: WEB2798: [] ServletContext.log(): ServletPath: /index.jsp
[04/Aug/2005:17:15:36] info (15708):      for host 129.147.40.215 trying to GET /index.jsp, service-j2ee reports: WEB2798: [] ServletContext.log(): PathInfo: null
[04/Aug/2005:17:15:36] fine (15708):      for host 0.0.0.0 trying to GET /index.jsp, ntrans-j2ee reports: mapped uri "/index.jsp" in context "" to resource "jsp"
[04/Aug/2005:17:15:36] info (15708):      for host 129.147.40.215 trying to GET /index.jsp, service-j2ee reports: WEB2798: [] ServletContext.log(): RealPath: /www/html/drc/index.jsp
[04/Aug/2005:17:15:36] info (15708):      for host 129.147.40.215 trying to GET /index.jsp, service-j2ee reports: WEB2798: [] ServletContext.log(): RequestURI: /index.jsp
[04/Aug/2005:17:15:36] info (15708):      for host 129.147.40.215 trying to GET /index.jsp, service-j2ee reports: WEB2798: [] ServletContext.log(): QueryString: null
[04/Aug/2005:17:15:36] failure (15708):      for host 129.147.40.215 trying to GET /index.jsp, service-j2ee reports: StandardWrapperValve[jsp]: WEB2792: Servlet.service() for servlet jsp threw exception
     org.apache.jasper.JasperException: WEB4000: Unable to compile class for JSPWEB4124:
     An error occurred at line: 3 in the JSP file: /index.jsp
     WEB4126: Generated servlet error:
     /opt/SUNWwbsvr/https-kesin.Central.Sun.COM/ClassCache/drc/default-webapp/_jsps/_index_jsp.java:66: package drc does not exist
     drc.database db = null;
     ^
     WEB4124:
     An error occurred at line: 3 in the JSP file: /index.jsp
     WEB4126: Generated servlet error:
     /opt/SUNWwbsvr/https-kesin.Central.Sun.COM/ClassCache/drc/default-webapp/_jsps/_index_jsp.java:69: package drc does not exist
     db= (drc.database)
     ^
     WEB4124:
     An error occurred at line: 3 in the JSP file: /index.jsp
     WEB4126: Generated servlet error:
     /opt/SUNWwbsvr/https-kesin.Central.Sun.COM/ClassCache/drc/default-webapp/_jsps/_index_jsp.java:74: package drc does not exist
     db = (drc.database) java.beans.Beans.instantiate(this.getClass().getClassLoader(), "drc.database");
     ^
     3 errors
     at org.apache.jasper.compiler.Compiler.compile(Compiler.java:312)
     at com.iplanet.ias.web.jsp.JspServlet$JspServletWrapper.loadJSP(JspServlet.java:764)
     at com.iplanet.ias.web.jsp.JspServlet$JspServletWrapper.access$000(JspServlet.java:624)
     at com.iplanet.ias.web.jsp.JspServlet.serviceJspFile(JspServlet.java:412)
     at com.iplanet.ias.web.jsp.JspServlet.service(JspServlet.java:363)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:908)
     at org.apache.catalina.core.StandardWrapperValve.invokeServletService(StandardWrapperValve.java:771)
     at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:322)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:509)
     at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:212)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:509)
     at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:209)
     at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:509)
     at com.iplanet.ias.web.connector.nsapi.NSAPIProcessor.process(NSAPIProcessor.java:161)
     at com.iplanet.ias.web.WebContainer.service(WebContainer.java:578)

it is certifying / authenticating that the secured
web site is owned by the genune party and the
transactions with the party is doing through a
encrypted format.
Am i correct up to this???Correct, that is what SSL/certificates are for.
>
Then my dowt is that
Is it possible to make my server SSL enabled with
h out using any certificate ????( the documents you
are given is telling about certificates)No it is not possible - the whole idea behind SSL communication is that it is based on TRUSTED secure communication. If a client can not check validity of server's certificate it is not trusted any more.
It might not seem to be the case when you create a self-signed certificate, but it really is so. In case of a self signed certificate you(i.e your browser) trust yourself with whatever you do with your application on your webserver.
After all can I install some certificates lateron ??
If you really need SSL with your webserver you have to either create a self signed certificate, see this: http://sial.org/howto/openssl/self-signed/
or request a test certificate from www.verisign.com or www.thawtee.com

Classloader and Sun One Application Server 8

Hello.
The problem is that it is impossible to load the digester at application level. Instead of it the digester at application server (Sun One Application Server 8) level is loaded. How can I change the situation?
Thanks.

This is happening because generally before a class loader loads a class it lets the parent class loader to load the class.
In Sun One App Server, only web apps can alter this behaviour. Set the delegate attibute of the class-loader element in sun-web.xml to false. This allows the web app class loader to load the class and only if the web app class loader fails to load the parent class loader is consulted.

I am beginner to sun one studio and sun one application server

How can i access a cmp from a jsp page.
in sun one application server.
thanx in advance

where do you get the weblogic plugin from ?
i am intrested in doing the same thing
thanx
prem
"Ivan" <[email protected]> wrote in message
news:[email protected]..
>
Dear all,
My boss require me to use Sun One Studio 4 update 1 to do the development,but
I find it's a nightmare to deploy the EJB/ application to the WebLogic6.1.
>
I've already installed the weblogic plug-in in the Sun One Studio.
During deploying I could not find any setting that ask me for theweblogic-ejb-jar.xml.
So I think the deployment will fail.
Is there any others tutorial or e-book that can help me to familiar withthe deployment
process?
Many Thanks for all of you.
Ivan

Integrate Sun ONE Messaging and Sun ONE Calendar server with Portal 6.0

We need to integrate (implement a Single Sign On solution) Sun ONE/iPlanet Messaging and Calendar servers with Portal 6.0. The Msg and Cal. servers do not use Portal Profile server as their DS and have a different DS.This directory server is the external DS for Portal. After users login to Portal, they should be able to access Msg and Cal. servers without login to them again.
1. How do we do this without writing a java code/servlet ?
2. Is there any way that we could configure DSAME to create the URL,add userID and password to it and forward that URL to above servers ?

Hi,
The SunOne communication providers for version 6.0 will be released soon.
(you can get beta versions from early access program)
Like in the portal version 3.0 these channels
are enabling SSO for messaging and calendar servers.
(I tested them with iMSG5.2 and Calendar5.1.1)
Cheers,
Alex :-)

Oracle error ORA-00600 when using Oracle 10g and Sun One Web Server 6.1

I have a java application that was running under Solaris 8 and Oracle 9i. I am trying to get it up and running on a new server that is configured with Solaris 9 and Oracle 10g. Whenever the application tries to connect to the database it receives the following error: ORA-00600 [ttcgcshnd-1][0]. My research indicates that this is an internal Oracle error that represents a low level unexpected condition. I have looked through my configuration for the Web Server and I have not been able to determine the cause of this problem. My DBA tells me that we have the latest patch installed for Oracle! Has anyone encountered this problem before? Any help would be greatly appreciated!

If the problem is also present in a SWING app, i.e. outside the web server, then it is porbably something external to the webserver.
I think you should ensure that the driver and database are compatible with each other. It is very likely that you need a new jdbc driver for the new database.
download from here http://www.oracle.com/technology/software/tech/java/sqlj_jdbc/htdocs/jdbc101020.html
try the ojdbc14.jar

"cross context" and SUN ONE Application Server 8

Hi All,
I was running an application in tomcat which had "cross-context" set to true. I tried to deploy it under SAS but it doesn't work, when it requests a resource from a different context it is not found. When I go directly to that context it gives me the resource.
Can anyone tell me what I should do to enable "crosscontext" (I had to do that to solve this problem in tomcat
Kind regards,
Marco Laponder

In your web app's sun-web.xml, add this property:
<sun-web-app>
<property name="crossContextAllowed" value="true"/>
</sun-web-app>

Can I upgrade Sun ONE Identity Server 6.0 schema v1.0 to schema v2.0

I'm have Sun ONE Identity Server 6.0
now I install Sun Java Communications Suite 5，but I'm copy dssetp to Sun ONE Identity Server 6.0 host,
i'm run pl comm_dssetup.pl
Welcome to the Directory Server preparation tool for
Sun Java(tm) System communication services.
(Version 6.3 Revision 1.0)
This tool prepares your directory server for use by the
communications services which include Messaging, Calendar and their components.
The logfile is /var/tmp/dssetup_20050830165940.log.
Do you want to continue [y]:
Please enter the full path to the directory where the Sun ONE
Directory Server was installed.
Directory server root [/usr/iplanet/servers/slapd-ids] : /usr/iplanet/servers/slapd-ids
Please select a directory server instance from the following list:
[1] slapd-sunldap
Which instance do you want [1]:
Please enter the directory manager DN [cn=Directory Manager]: cn=DirMan
Password:
DirectoryServernotrunningornotlisteningtoport389.*
DetectedDSversion0.0*
Pleasecorrecttheproblemandre-runthisscript.*

Hi,
whr25 wrote:
I'm have Sun ONE Identity Server 6.0
now I install Sun Java Communications Suite 5，but I'm copy dssetp to Sun ONE Identity Server 6.0 host,
i'm run pl comm_dssetup.pl
Welcome to the Directory Server preparation tool for
Sun Java(tm) System communication services.
(Version 6.3 Revision 1.0)
This tool prepares your directory server for use by the
communications services which include Messaging, Calendar and their components.
The logfile is /var/tmp/dssetup_20050830165940.log.
Do you want to continue [y]:
Please enter the full path to the directory where the Sun ONE
Directory Server was installed.
Directory server root [/usr/iplanet/servers/slapd-ids] : /usr/iplanet/servers/slapd-ids
Please select a directory server instance from the following list:
[1] slapd-sunldap
Which instance do you want [1]:
Please enter the directory manager DN [cn=Directory Manager]: cn=DirMan
Password:
DirectoryServernotrunningornotlisteningtoport389.*
DetectedDSversion0.0*
Pleasecorrecttheproblemandre-runthisscript.*So is the directory server instance running?
I'm a little unsure as to what your actual problem is. You say "Can I upgrade Sun ONE Identity Server 6.0 schema v1.0 to schema v2.0" in the question subject but then don't clarify this in the above.
Regards,
Shane.

Sun One Web Server 6.0 Service Pack 5

I installed Windows 2000 SP3, Coldfusion MX Updater 1, and Sun One Web Server 6.0 Service Pack 5. In 2 separate instances I had the Sun One Web Server Stop serving all html pages immediately after I set automatic access log rotation in the web server administrator. I had the access log rotate every 1440 minutes at 12:00 AM. Although the web server instance appeared to be started, no html pages could be served. In addition, I was not able to undo the changes through the web server administrator. I finally tried to edit the magnus.conf file to remove the new log settings. However, nothing could bring back the web server into a working state. Web Server restarts and entire server reboots did not resolve this issue. I was wondering if anybody else has seen this issue and if so, how did you resolve it? I was forced to completely uninstall the web server and reinstall it. This makes me hesitant to put Sun One Web Server 6.0 SP5 into production. Any other thoughts or experiences with SP5 in a Windows/ColdfusionMX environment? Thanks for any help?

Since removing the log settings from magnus.conf failed to fix the problem, the log settings are probably not the source of the problem.
Did anything else - e.g. ColdFusion configuration changes - occur at about the same time you changed the log settings?

Sun ONE Directory SDK for C support on RHAs 4.0 and Win 2003 R2

What version of Sun One Directory SDK supported on RHAS 4.0 and Windows 2003 R2.
Please confirm.
Thanks,
Rahul

The C-SDK that will come with Directory Server Enterprise Edition 6 will support both RH AS 4 and Windows 2003.
But for today, I would say that the version in mozilla.org does support them.
We are currently contributing all of our changes, bug fixes and improvements to Mozilla.org and future versions of the Sun C-SDK will be directly built from Mozilla.org sources.
Ludovic.

Help!! How to install and use Sun ONE Directory Server Resource Kit 5.2

Hi ! Friend:
I have some problem on install and use Sun ONE Directory Server Resource Kit 5.2, when I execute "java DSRK", afterwards something like this : com.iplanet.install.until.wbResource::gerstring:resource bundle"locale.resources.S1DSRKResource" not found appeared in the window ,that's why?
Meanwhile ,can you give some data about it on how to use it ?
Thank you !

You should be aware of the following characteristics of your directory when using this tool:
Size and number of entries.
Directory structure and access permissions.
Virtual attributes, class of service, and indexing.
Usage, types of access, and access patterns.
Post your error messages completely.
Thanks
--Britto

Sun ONE Directory Server 5.1 SP1 crash

A bug not present in the 5.1 without SP, only in SP1.
Scenario:
- Solaris 8 or Solaris 9.
- Sun ONE Directory Server 5.1 SP1.
- Changelog enabled with maximun age of 1 day.
- Retro Changelog Plugin active (needed for the metadirectory access of cn=changelog).
The LDAP crashes when:
- You search for a changeNumber <= in cn=changelog and that search does not return any entry.
Something like this will crash de LDAP server:
ldapsearch -D "cn=Directory Manager" -w <passwd> -b cn=changelog "(changeNumber<=0)"
Does anyone have experienced this?
Any idea?

No. You can try it.
One with changeNumber, only with <= searches, only when the search does not return anything, and only when there has been, at least, a change in the database (that produced a changelog that it is not included in the search).
I can�t belive nobody has experienced that.
Do you think that all metadirectories use that kind of searches?. We use Critical Path.

How to encrypt password in Sun ONE directory server?

Hi,
I'm trying to perform an update to a password field in Sun ONE directory server using JNDI, but the stored password does not get encrypted by the directory server. I've searched the forum, and only found examples on how to do so for Active Directory. Please help.
Thanks

You didn't make mention of setting up ssl on the server side, so search these boards for openssl. Some nice person uploaded an nice example of how do use openssl to do this.
To get the ssl certs for the solaris-client ssl authentication ( tls:simple ) to work you will need to use netscape to connect to the ssl port to get the right format. There are comments in that same doc on how to do that.

Active Directory 2003 and Sun One Directory Server 5.2

Similar Messages

Maybe you are looking for