Authentication failed binding to mac server 2.2.1

I have setup a new Mac Mini Server running Mountain Lion 10.8.2 and OS X Server 2.2.1.  I am trying to join my Macbook Pro to Open Directory however it continues to fail.  It does prompt with the SSL warning which I select continue on, however when I enter the diradmin username and password I get an Authentication Failed message when binding.  I can access the directory via workgroup manager ok and I have also been able to join my Synology NAS to the Directory Service first time.
Baffled and scratching my head.  Any ideas?

Server Version is 2.2.1 and it's installed on a Mac Mini Server running 10.8.2.  Just a single OD server at present.
Future project:  Can we make a Synology NAS which can also a be a Open Directory Server act as a Domain Replica?

Similar Messages

  • Windows machine bind with mac server without magic triangle using pgina

    Any operating system of windows 7 will bind with Mac server.
    Here is the tip and configuration.
    Download Pgina 3.1.8 version and install it on any windows platform machine.
    For installing pgina you required Dot Net framework 4.2 or later version.
    After installing configure the pgina service. Under plugin selection select LDAP, Local Machine, Email Authentication.
    For LDAP select all the check box. Select configure tab and edit.
    Example
    Server Name : Mydomain.com. IP Address : 10.0.0.1
    LDAP Host - server name or ip address.
    LDAP Port  - 389  Timeout - 10
    Search DN  - Admin user name of mac server
    Search Password - Admin password of mac server
    Group Pattern - Blank (delete default)
    Authentication for LDAP.
    User DN pattern - Default (No change)
    Check search for DN
    Search filter - dc=mydomain,dc=com
    Search channel - dn=mydomain.com
    And then click save.
    For Local machine :
    Select default and save it.
    Email Authentication :
    Protocol : pop3
    server address : server IP address
    Port : 110
    Timeout : 10000
    Save.
    Logout and loginto Opendirectory user's Login.
    And Map your network driver. And configure the outlook on your Local machine.
    For ichat use pidgin software.
    For ical use syncmate software.

    Any operating system of windows 7 will bind with Mac server.
    Here is the tip and configuration.
    Download Pgina 3.1.8 version and install it on any windows platform machine.
    For installing pgina you required Dot Net framework 4.2 or later version.
    After installing configure the pgina service. Under plugin selection select LDAP, Local Machine, Email Authentication.
    For LDAP select all the check box. Select configure tab and edit.
    Example
    Server Name : Mydomain.com. IP Address : 10.0.0.1
    LDAP Host - server name or ip address.
    LDAP Port  - 389  Timeout - 10
    Search DN  - Admin user name of mac server
    Search Password - Admin password of mac server
    Group Pattern - Blank (delete default)
    Authentication for LDAP.
    User DN pattern - Default (No change)
    Check search for DN
    Search filter - dc=mydomain,dc=com
    Search channel - dn=mydomain.com
    And then click save.
    For Local machine :
    Select default and save it.
    Email Authentication :
    Protocol : pop3
    server address : server IP address
    Port : 110
    Timeout : 10000
    Save.
    Logout and loginto Opendirectory user's Login.
    And Map your network driver. And configure the outlook on your Local machine.
    For ichat use pidgin software.
    For ical use syncmate software.

  • POP3 Authentication fails on Exchange 2013 server.

    We have an internal help desk app that needs to use POP3 to send acknowledgements.  Everything worked fine with the previous Exchange 2010 server, but I am getting "Connection reset" from the help desk app and
    unexpected terminations (0x800CCC0F) from an Outlook Express client I am using to test this scenario.
    The two POP3 services: the Microsoft Exchange POP3 service and the Microsoft Exchange POP3 Backend services are running.
    My Test-PpoConnectivity returns this:
    RunspaceId                        : 4d16307d-e2e0-4a98-b69d-f05d1a778351
    Name                              : 1
    ProtocolName                      : POP3
    MaxCommandSize                    : 512
    MessageRetrievalSortOrder         : Ascending
    UnencryptedOrTLSBindings          : {0.0.0.0:110, [::]:110}
    SSLBindings                       : {0.0.0.0:995, [::]:995}
    InternalConnectionSettings        : {Mail.WTI.LOCAL:995:SSL, Mail.WTI.LOCAL:110:TLS}
    ExternalConnectionSettings        : {}
    X509CertificateName               : Mail
    Banner                            : The Microsoft Exchange POP3 service is ready.
    LoginType                         : PlainTextLogin
    AuthenticatedConnectionTimeout    : 00:30:00
    PreAuthenticatedConnectionTimeout : 00:01:00
    MaxConnections                    : 2147483647
    MaxConnectionFromSingleIP         : 2147483647
    MaxConnectionsPerUser             : 16
    MessageRetrievalMimeFormat        : BestBodyFormat
    ProxyTargetPort                   : 9955
    CalendarItemRetrievalOption       : iCalendar
    OwaServerUrl                      :
    EnableExactRFC822Size             : False
    LiveIdBasicAuthReplacement        : False
    SuppressReadReceipt               : False
    ProtocolLogEnabled                : False
    EnforceCertificateErrors          : False
    LogFileLocation                   : C:\Program Files\Microsoft\Exchange Server\V15\Lo
    LogFileRollOverSettings           : Daily
    LogPerFileSizeQuota               : 0 B (0 bytes)
    ExtendedProtectionPolicy          : None
    EnableGSSAPIAndNTLMAuth           : True
    Server                            : MAIL
    I need some help regarding what might be wrong.
    Thanks!

    Hi,
    Does this issue occur on Office Outlook client?
    About port.
    By default port 25 is for outgoing access, and port 110 is for incoming access.
    If you are not sure about the ports, please contact your ISP or system administrator to double confirm it.
    About error 0x800CCC0F.
    Please see following KB in details:
    Error occurs when you send or receive an email message in Outlook or Outlook Express
    http://support.microsoft.com/kb/813514/en-us
    Thanks
    Mavis
    Mavis Huang
    TechNet Community Support
    No answer in a week?
    Really??

  • Authentication failed

    hello!
    my aol email has frozen on my phone.  I tried refreshing and that did not work.  I deleted my email account and now when I try to restart the email account it says authentication failed (after checking incoming server settings).  my friend has the same phone, her email froze last week, she refreshed it and now it works.  I don't understand why mine is not working.  any help or suggestions would be appreciated.

        Artesianrev,
    We want you to be able to enjoy using your email account on your Samsung Galaxy S4! Have you checked to make sure your email account does not have 2-step verification set up on it? http://bit.ly/1njb5e4 Are you manually entering it the server information for the email account? http://vz.to/1jZGAq6
    LindseyT_VZW
    Follow us on Twitter @VZWSupport

  • Exchange 2010 sp2 emc initialization error using "kerberos" authentication failed

    We use exchange 2010 SP2.
    We have 2 management stations, both w2k8 R2 SP1.
    I have one mangement station on which the emc and ems works ok.
    On the other management staiton (which is also in another ad site) the emc and ems don't work.
    I get the following error message : The attempt to connect to
    http://fqdnCasServer/PowerShell using "Kerberos" authentication failed: Connecting to remote server failed with the following error message : Access is denied. For more information, see the about_Remote_Troubleshooting Help topic.
    I have checked the time on the management station and on the exchange server and this is ok.
    It is not a permissions issue because the user functions ok on the other management station.
    On the bad management station I can open the emc once and after a minute I get an error message and the message access denied. From then on I can't connect any more.
    What am I doing wrong?
    Anyone any tips?
    Thanks,
    JB 

    This is what I get in the eventlog of the bad management station.
    Log Name:      MSExchange Management
    Source:        MSExchange CmdletLogs
    Date:          1/10/2012 11:39:27
    Event ID:      6
    Task Category: (1)
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      Server.domain.com
    Description:
    The description for Event ID 6 from source MSExchange CmdletLogs cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
    If the event originated on another computer, the display information had to be saved with the event.
    The following information was included with the event:
    Get-ExchangeServer
    {Identity=Servername}
    Domain/ou/ou/ou/ou/username
    Exchange Management Console-Local
    3080
    22
    00:00:00.3593888
    View Entire Forest: 'True', Configuration Domain Controller: 'FQDN DC', Preferred Global Catalog: 'FQDN DC', Preferred Domain Controllers: '{ FQDN DN }'
    Microsoft.Exchange.Configuration.Tasks.ManagementObjectNotFoundException: The operation couldn't be performed because object 'FQDN MGMTSTATION' couldn't be found on 'FQDN DC'.
    Context
    the message resource is present but the message is not found in the string/message table
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="MSExchange CmdletLogs" />
        <EventID Qualifiers="49152">6</EventID>
        <Level>2</Level>
        <Task>1</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2012-10-01T09:39:27.000000000Z" />
        <EventRecordID>11</EventRecordID>
        <Channel>MSExchange Management</Channel>
        <Computer>FQDN MGMT STATION</Computer>
        <Security />
      </System>
      <EventData>
        <Data>Get-ExchangeServer</Data>
        <Data>{Identity=MGMT STATION}</Data>
        <Data>domain/ou/ou/ou/ou/username</Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>Exchange Management Console-Local</Data>
        <Data>3080</Data>
        <Data>
        </Data>
        <Data>22</Data>
        <Data>00:00:00.3593888</Data>
        <Data>View Entire Forest: 'True', Configuration Domain Controller: 'FQDN DC', Preferred Global Catalog: 'FQDN DC', Preferred Domain Controllers: '{ FQDN DC }'</Data>
        <Data>Microsoft.Exchange.Configuration.Tasks.ManagementObjectNotFoundException: The operation couldn't be performed because object 'FQDN MGMT STATION' couldn't be found on 'FQDN DC'.</Data>
        <Data>Context</Data>
        <Data>
        </Data>
      </EventData>
    </Event>

  • "Kerberos" authentication failed while trying to access EMC or EMS

    Salam,
    I have successfully installed Exchange 2010 SP1 on a transitional environment, the installation went smooth without any problem and I've done most of the trasitioning configuration from Exchange Server 2003 to Exchange Server 2010.
    Currently we're in the process of moving the mailboxes, but I've come across a problem recently which stopped all my work and I can no longer commence with this transition unless its solved.
    Sometimes when I try to access EMC or EMS I get the hereunder error:
    The following error occurred while attempting to connect to the specified Exchange server 'afhmail.arabfinancehouse.com.lb':
    The attempt to connect to http://afhmail.arabfinancehouse.com.lb/PowerShell using "Kerberos" authentication failed: Connecting to remote server failed
    with the following error message : Access is denied. For more information, see the about_Remote_Troubleshooting Help topic.
    I've read most of the articles found on the internet including
    http://msexchangeteam.com/archive/2010/02/04/453946.aspx to try to troubleshoot this problem but nothing has worked so far, I tried removing Win RM IIS extensions as well then adding them again with a restart and nothing. I tried the Kerbauth dll removal
    also nothing and the problem keeps to occur and the situation is not stable.
    Also I read in a KB article somewhere that if we have multiple domain controllers a single domain controller should be assigned on the Exchange Server (Organization Configuration, Server Configuration, Recipient Configuration) so I assigned the PDC to be selected
    by those configurations at startup, yet I am still facing the same problem.
    Again I emphasis that the problem comes and goes, at a time I can access EMS and at another is just gives me the Kerberos error.
    Thank you very much in advance,
    Kindest Regards.
    Abdullah Abdullah

    Hi Abdullah,
    Can you open the EMS?
    If yes, please run the WinRM QC and post the results here.
    If possible, please use another admin's account to log on to Exchange to try to open EMC.
    Frank Wang
    TechNet Subscriber Support
    in forum
    If you have any feedback on our support, please contact
    [email protected]
    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

  • 'authentication failed' using Microsoft ADSI version LDAP server

    Hi All,
    Now days i am facing some problem in authentication (i am using microsoft ADSI version LDAP Server) but am not able to authenticate the LDAP users.
    I have configured my LDAP server in the same manner as u mentioned in this blog.
    when I am trying to authenticate the user from the RPD itself i m gettig the following error:
    “authentication failed” (actually i forgot the exact message but it mean is same as i referred here)
    though i am able authenticate the bind user ( which i used to configure the LDAP Server)
    Please help me in this as i already wasted a lot of time in doing R&D to make it work..
    I have an urgent requirement to do the same..
    Your help will highly appreciated…
    thanks in advance
    PS: I have checked the 'ADSI' box in advance tab:

    Hi,
    Please have a look at the below link:
    Unknown certificate error when testing LDAP SSL connection
    Not sure whether it will help you. But have a look at it.
    Regards,
    Jithin

  • Proxy authentication failed in MAc OS 10.8.3

    I am using firefox 21.0 in Mac os 10.8.3.We are using proxy server for browsing.While browsing internet firefox prompts for proxy username and password,after entering the correct user name and password it shows proxy authentication failed,Another round of authentication required.The same user name and pssword in working fine in safari in the same mac book.
    Plz Help

    Hi There!
    Please check the solution mentioned here:
    http://kb.globalscape.com/KnowledgebaseArticle10522.aspx
    I remember someone else also suggested setting this option '''network.automatic-ntlm-auth.allow-proxies''' to '''false '''as well.
    Hope this helps!
    Have a good one!
    Dawid

  • Connecting to Mac Server is Timing Out on Authentication

    We are a part of a Active Directory network. Our Mac server is mainly used for getting people to their home directories.
    Our server can be pinged by its IP or by it's domain name. It can be accessed through ARD and everything, but users are not able to authenticate to it right now. One day this worked fine, the next day it stopped working.
    During the boot process, most computers are just hanging at the login screen after they type in their user id and password. The only way around that is for them to type in their username and password with the network cable unplugged (because they have portable home directories).
    The best example of this problem I can give is that if I do a command K, or Connect to Server and type in the IP or name of the server, I will be given an authentication window. I can connect as a guest or a registered user. If I do a registered user like we always have, and type in my info, it will sit there for minutes before saying "Connection Failed (unknown user, incorrect password, or login is disabled.)"
    If I would instead connect as a Guest instead of a registered user, I can get in right away.
    Most systems are at 10.4.2, some are 10.4.3. The server is 10.4.3.
    Any suggestions?

    The constructor of MimeMessage class required both Session and InputStream parameters, see
    http://java.sun.com/j2ee/sdk_1.3/techdocs/api/javax/mail/internet/MimeMessage.html
    for documentation.
    I hope I helped you!
    see you soon

  • How do I bind to directory server with SSL and authentication?

    I'm running Lion Server 10.7.3, Open Directory master. In Open Directory/Settings/LDAP, I've checked the box to Enable SSL and selected a (self-signed) certificate. In Policies/Binding, I've checked the box to Enable Authenticated Directory Binding.
    Testing with a client computer on which Snow Leopard has been freshly installed and fully updated, I went to System Prefs/Accounts to bind to the new directory server. The good news is, the binding was successful, and when the client initiates an AFP connection with the server, it uses Kerberos, creating a ticket as expected. (Which doesn't work with Lion clients, alas, but that's a seperate matter.)
    Here are the problems:
    1) It looks like the binding did not use SSL. By which I mean that when I opened Directory Utility and examined the LDAPv3 entry, the SSL checkbox was not checked. (If I then check the box, everything looks fine until I restart the client, after which I have a red dot. So I'm guessing that checking the box does nothing until after restart, and that it breaks the binding.)
    2) I was never prompted to authenticate for the directory binding.
    So I get that literally I'm *enabling* SSL and Authenticated Directory Binding, but it seems like the defaults are to bind without SSL or authentication, and there's no obvious-to-me way to force the binding to use those things. How do I do that?
    What I'd really like to do is *require* SSL and Authenticated Directory Binding. I want this because my belief (correct me if I'm wrong) is that if authentication is required to bind to the server, no one will be able to bind to my server without my permission, and that SSL offers a more secure connection to my server than not-SSL. How do I require these things, or do I not really want to?
    Thank you.

    You cannot connect to databases via Muse at the moment. Please refer: http://forums.adobe.com/message/5090145#5090145
    Cheers,
    Vikas

  • Javax.servlet.jsp.JspException: REP-51002: Bind to Reports Server reportserver fail??

    why i cant open my report in JDeveloper tools but i can open in report builder ????
    this is the error i get ...
    Reports Error Page
    Fri Oct 18 15:41:54 SGT 2002
    javax.servlet.jsp.JspException: REP-51002: Bind to Reports Server reportserver failed
    javax.servlet.jsp.JspException: REP-51002: Bind to Reports Server reportserver failed
         int oracle.reports.jsp.ReportTag.doStartTag()
              ReportTag.java:329
         void MyReport.jspService(javax.servlet.http.HttpServletRequest, javax.servlet.http.HttpServletResponse)
              MyReport.jsp:4
         void oracle.jsp.runtime.HttpJsp.service(javax.servlet.ServletRequest, javax.servlet.ServletResponse)
              HttpJsp.java:119
         void oracle.jsp.runtimev2.JspPageTable.service(javax.servlet.http.HttpServletRequest, javax.servlet.http.HttpServletResponse, java.lang.String)
              JspPageTable.java:302
         void oracle.jsp.runtimev2.JspServlet.internalService(javax.servlet.http.HttpServletRequest, javax.servlet.http.HttpServletResponse)
              JspServlet.java:407
         void oracle.jsp.runtimev2.JspServlet.service(javax.servlet.http.HttpServletRequest, javax.servlet.http.HttpServletResponse)
              JspServlet.java:328
         void javax.servlet.http.HttpServlet.service(javax.servlet.ServletRequest, javax.servlet.ServletResponse)
              HttpServlet.java:336
         void com.evermind.server.http.ServletRequestDispatcher.invoke(javax.servlet.ServletRequest, javax.servlet.ServletResponse)
              ServletRequestDispatcher.java:684
         void com.evermind.server.http.ServletRequestDispatcher.forwardInternal(javax.servlet.ServletRequest, javax.servlet.http.HttpServletResponse)
              ServletRequestDispatcher.java:269
         boolean com.evermind.server.http.HttpRequestHandler.processRequest(com.evermind.server.ApplicationServerThread, com.evermind.server.http.EvermindHttpServletRequest, com.evermind.server.http.EvermindHttpServletResponse, java.io.InputStream, java.io.OutputStream, boolean)
              HttpRequestHandler.java:735
         void com.evermind.server.http.HttpRequestHandler.run(java.lang.Thread)
              HttpRequestHandler.java:243
         void com.evermind.util.ThreadPoolThread.run()
              ThreadPoolThread.java:64

    i still get the same error .. is it i need to set any environment variable or ... any setting ...??
    login Oracle Database
    user name = system
    password = manager
    services = dbhenry
    setting JSP Report
    Report Name = MyReport1
    Reports Server = reportserver
    Parameters = userid=system/manager@dbhenry
    the cource code below is my JSP report coding :
    <rw:report id="MyReport1" parameters="server=reportserver&userid=system/manager@dbhenry">
    <rw:objects id="objects">
    <?xml version="1.0" encoding="WINDOWS-1252" ?>
    <report name="MyReport1" DTDVersion="9.0.2.0.0">
    <xmlSettings xmlTag="MYREPORT1" xmlPrologType="text">
    <![CDATA[<?xml version="1.0" encoding="&Encoding"?>]]>
    </xmlSettings>
    <data>
    <dataSource name="Q_1">
    <select>
    <![CDATA[SELECT ALL HENRY.TEL, HENRY."ADD", HENRY.NAME, HENRY.ID
    FROM HENRY ]]>
    </select>

  • Bind to Reports Server localhost failed

    Hi:
    I am using Oracle 10g(1.2.0.2) on winxp professional.
    I successfully deployed my war using Oracle Enterprise Manager. but when i try to run the application on browser using link
    http://your_computer_name:port/MyReportApp/JSPreportname.jsp?userid=user
    ID/password@database_name
    I get the following error
    javax.servlet.jsp.JspException: REP-51002: Bind to Reports Server localhost failed
    my oracle app server is on default port 80 and when i run http://localhost the application server default welcome page comes up
    my report server is also running i use the following coomand on browser
    http://localhost/MyReportApp/JSPreportname.jsp?userid=user
    ID/password@database_name
    and I am inserting the proper user id password and database name
    i think i should be using the port No on which the report server is listening to if this is right can anybody help me where i can find this port No
    regards

    The error suggests that your report server name is taken as "localhost" which is strange.
    Check the name of server in rwservlet.properties file in OH/reports/conf
    also try to run this--
    http://your_computer_name:port/reports/rwservlet/getserverinfo?
    this should give the default server name which can be used for your jsp deployment.
    Regards
    Subodh

  • Ical "authentication failed. your username and password were rejected by the server"

    i've a pretty busy server, fully configured with correct DNS.
    running 10.6.8, uptodate. i've stopped the ical service, and removed it from the server settings.
    then i created a folder on my RAID /volumes/raid/ical, set its ownership to _calendar:_calendar (uid 93), rwx,rx,-
    then added the iCal service back, and set the data store to this new folder.
    authentication is set to digest (to reduce potential kerberos errors), with SSL on.
    i then started the service
    an existing user CANNOT connect to the caldav server. i get the error: ical "authentication failed. your username and password were rejected by the server".
    if i create a NEW user, that user can correctly connect to the Caldav server. On first joining, an entry is created in the __uids__ folder and the calender works.
    SO. WHAT IS GOING ON?
    this is 10.6, so i do not have an option in WGM to 'enable calendering'. i've used the inspector to check for differences, but i can't see any.
    help. please. and no comments about DNS. the fact i can get  a new user to function means that is excluded. no comments about SSL. ditto. no comments about kerberos, its turned off. thanks.

    I often think of things in terms of time it takes to figure out the solution to the problem vs time it takes to nuke and pave.
    Dare I ask...  How many users would you have to remake? 
    150 users would probably take 2 hours to recreate?
    ...Have you spent 2 hours on this problem yet?  How about 4 or 6?
    Perhaps you could have typed up 450 remade users so far!
    I have a great idea as to how to change ownership of home folders to users after they're created.
    Thoughts on the problem... (but don't spend too much time on it!)
    What about crypt vs open directory password?
    In WGM, select the user, click the advanced tab, and ensure that your users have OD based passwords? 
    ...sometimes that pull-down menu displays OD, but it's not really.  Try selecting OD, retype the password there, and save.
    See if it works.
    What about in server admin....  Select the server in question, click the access button at the top.
    Ensure that your services are allowed for all users to use the iCal service.
    In the iCal service in Server Admin...
    Host name setting?  It's a stretch as new users seem to work.  Ensure it's correct?
    For the sake of argument...  Change authentication type to Any Method...  If you're running OD on the server, Kerberos is running.  I know that certain services require it even though you have the option.  Perhaps iCal is being finiky without it?
    I apologize if you've tried all these, but as a user forum, you'll typically get users that don't believe that you've tried the basics.  It's honestly the best place to start.  Seeing as we don't know what you've done, it's the best advice you'll get.
    HTH
    -Graham

  • Discussion Server Authentication Failed From Inside FMW App

    Hi Community,
    My Env:
    Webcenter 11.1.1.3.0
    Weblogic 10.3.3
    The discussion server shipped with webcenter suite is Jive Forums Silver 5.5.20 .2-oracle.
    I wired the discussion server to embedded LDAP server of my weblogic server, and deployed an app that utilize the discussion service.
    But when accessing the app page, I got an exception "failure to authenticate the user pbrown, due to: Authentication Failed".
    The users do exist in LDAP server and I can login to http://server:8890/owc_discussions page with that users, I also granted all privileges to the users in jive console, but it doesn't work inside the app.
    My Jive server log:
    [2010-09-05T23:21:22.816-07:00] [WLS_Services] [ERROR] [] [org.codehaus.xfire.handler.DefaultFaultHandler] [tid: [ACTIVE].ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'] [ecid: 0000If_hC7s5e_Vau1q2UH1CWBaI0000E_,0] [APP: owc_discussions#11.1.1.2.0] [dcid: bafcaeab2cd82008:-b3c6f44:12ad6d55fae:-8000-00000000000003c6] Fault occurred![[
    com.jivesoftware.base.UnauthorizedException: Authentication Failed
    at com.jivesoftware.forum.webservices.server.xfire.PermissionHandler.acquireAuthToken(PermissionHandler.java:194)
    at com.jivesoftware.forum.webservices.server.xfire.PermissionHandler.invoke(PermissionHandler.java:98)
    at org.codehaus.xfire.handler.HandlerPipeline.invoke(HandlerPipeline.java:131)
    at org.codehaus.xfire.transport.DefaultEndpoint.onReceive(DefaultEndpoint.java:64)
    at org.codehaus.xfire.transport.AbstractChannel.receive(AbstractChannel.java:39)
    at org.codehaus.xfire.transport.http.XFireServletController.invoke(XFireServletController.java:287)
    at org.codehaus.xfire.transport.http.XFireServletController.doService(XFireServletController.java:130)
    at org.codehaus.xfire.transport.http.XFireServlet.doPost(XFireServlet.java:117)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:821)
    at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
    at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
    at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:300)
    at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:27)
    at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57)
    at com.opensymphony.webwork.dispatcher.FilterDispatcher.doFilter(FilterDispatcher.java:189)
    at com.jivesoftware.base.action.util.JiveFilterDispatcher.doFilter(JiveFilterDispatcher.java:69)
    at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57)
    at com.jivesoftware.base.util.webwork.JiveActionContextCleanUp.doFilter(JiveActionContextCleanUp.java:38)
    at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57)
    at oracle.dms.wls.DMSServletFilter.doFilter(DMSServletFilter.java:330)
    at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:57)
    at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.doIt(WebAppServletContext.java:3684)
    at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3650)
    at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
    at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:121)
    at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2268)
    at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2174)
    at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1446)
    at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
    at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
    Log of the server that hosts the app:
    [2010-09-05T23:21:08.184-07:00] [AdminServer] [WARNING] [] [oracle.adf.controller.internal.metadata.MetadataService] [tid: [ACTIVE].ExecuteThread: '5' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: anonymous] [ecid: 0000If_h8YC5e_Vau1q2UH1CWBIO0001Nc,0] [APP: StoreFrontModule#V2.0] [dcid: bafcaeab2cd82008:3873773a:12ad6c38b8a:-8000-0000000000001665] ADFc: /WEB-INF/adfc-config.xml:
    [2010-09-05T23:21:08.185-07:00] [AdminServer] [WARNING] [ADFC-52024] [oracle.adf.controller.internal.metadata.MetadataService] [tid: [ACTIVE].ExecuteThread: '5' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: anonymous] [ecid: 0000If_h8YC5e_Vau1q2UH1CWBIO0001Nc,0] [APP: StoreFrontModule#V2.0] [dcid: bafcaeab2cd82008:3873773a:12ad6c38b8a:-8000-0000000000001665] [arg: shoppingCartBean] ADFc: Duplicate managed bean definition for 'shoppingCartBean' detected.
    [2010-09-05T23:21:08.190-07:00] [AdminServer] [ERROR] [] [org.apache.myfaces.trinidadinternal.application.StateManagerImpl] [tid: [ACTIVE].ExecuteThread: '5' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: anonymous] [ecid: 0000If_h8YC5e_Vau1q2UH1CWBIO0001Nc,0] [APP: StoreFrontModule#V2.0] [dcid: bafcaeab2cd82008:3873773a:12ad6c38b8a:-8000-0000000000001665] Could not find saved view state for token uutg3hslp
    [2010-09-05T23:21:11.851-07:00] [AdminServer] [WARNING] [] [oracle.adfinternal.view.faces.renderkit.rich.NavigationPaneRenderer] [tid: [ACTIVE].ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: anonymous] [ecid: 0000If_h9SE5e_Vau1q2UH1CWBIO0001Ni,0] [APP: StoreFrontModule#V2.0] [dcid: bafcaeab2cd82008:3873773a:12ad6c38b8a:-8000-000000000000166f] Warning: There are no items to render for this level
    [2010-09-05T23:21:22.821-07:00] [AdminServer] [WARNING] [WCS-04013] [oracle.webcenter.collab.forum.internal.view.backing] [tid: [ACTIVE].ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: pbrown] [ecid: 0000If_hC765e_Vau1q2UH1CWBIO0001Nm,0] [APP: StoreFrontModule#V2.0] [dcid: bafcaeab2cd82008:3873773a:12ad6c38b8a:-8000-0000000000001673] [arg: pbrown] [arg: Authentication Failed] failure to authenticate the user pbrown, due to: Authentication Failed[[
    oracle.webcenter.collab.share.LoginFailedException: failure to authenticate the user pbrown, due to: Authentication Failed
    at oracle.webcenter.collab.forum.internal.jive.JiveAuthenticator.handleException(JiveAuthenticator.java:304)
    at oracle.webcenter.collab.forum.internal.jive.JiveAuthenticator.login(JiveAuthenticator.java:247)
    at oracle.webcenter.collab.forum.internal.jive.JiveForumSession.login(JiveForumSession.java:128)
    at oracle.webcenter.collab.share.Session$1.call(Session.java:353)
    at oracle.webcenter.collab.share.Session$1.call(Session.java:347)
    at oracle.webcenter.concurrent.Submission$2.run(Submission.java:406)
    at oracle.security.jps.util.JpsSubject.doAsPrivileged(JpsSubject.java:313)
    at oracle.webcenter.concurrent.Submission.runAsPrivileged(Submission.java:420)
    at oracle.webcenter.concurrent.Submission.run(Submission.java:347)
    at oracle.webcenter.concurrent.Submission$SubmissionFutureTask.run(Submission.java:737)
    at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:442)
    at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:303)
    at java.util.concurrent.FutureTask.run(FutureTask.java:139)
    at oracle.webcenter.concurrent.ModifiedThreadPoolExecutor$Worker.runTask(ModifiedThreadPoolExecutor.java:657)
    at oracle.webcenter.concurrent.ModifiedThreadPoolExecutor$Worker.run(ModifiedThreadPoolExecutor.java:683)
    at java.lang.Thread.run(Thread.java:619)
    Caused by: Authentication Failed
    Thanks,
    Todd

    I have same problem here. used weblogic admin but still doesnt works. Thats amazing or not?
    oracle.webcenter.collab.share.LoginFailedException: failure to authenticate the user Weblogic, due to: Authentication Failed
    Edited by: José Carlos on 06/09/2010 06:56

  • EAP-TLS or PEAP authentication failed during SSL handshake to the ACS serve

    We are running the LWAPP (2006 wlc's and 1242 AP's) and using the ACS 4.0 for authentication. Our users are
    experiencing an issue, where they are successfully authenticated the first time, however as the number of them is increasing, they're starting to drop the connections and being prompted to re-authenticate. At this point, they are not being able to authenticate again.
    We're using PEAP for the authentication and Win XP SP2 clients as the supplicants. The error message that we are seeing on the ACS for that controller is "EAP-TLS or PEAP authentication failed during SSL handshake to the ACS server"...Not sure if this error msg is relevant since we have other WLC's that are working OK and still generating the same error msg on the ACS...
    Thanks..

    Here are some configs you can try:
    config advanced eap identity-request-timeout 120
    config advanced eap identity-request-retries 20
    config advanced eap request-timeout 120
    config advanced eap request-retries 20
    save config

Maybe you are looking for