Can`t install CA in iPlanet Directory Server 5.0 ??

Hi All,
i try to install a self-signed CA-certifikate, under "CA-Certs" in
iPlanet Directory Server 5.0.
The certificate is generated using the tool "ssleay" or from an
Windows2000-CA.
Always i get "the certificate specified is not a valid CA certificate,
installation aborted"
thanks in advance
S. Horn

Hi Sven
I'm having a similar problem. I generated my self-signed cert. using keytool. Did u find an answer to ur query? If so please inform.
regards
Sikka

Similar Messages

Error while installing iplanet directory server 5.0

Hi I am trying to install iPlanet directory server 5.0 on my local machine.My computer name doesnot contain any domain name.it is simply like "ERT3210".
While installing Directory server it is asking for the computer name and if i give the computer name without domain it is not accepting.And i am unable to rename my computer name suffixing domain name as it is not contained in any domain..Now How can i give the computer name to install directory server?.Its very urgent for me.It will be great help if any one give reply.

Start/Stop Directory Server and Start/Stop Admin Server are usually present in My Computer/Manage/Services, just start or stop the service.
Assuming the install root directory is %LDAP_ROOT%
You could always create program icons for
1) start/stop dirrectory server
%LDAP_ROOT%\slapd-%COMPUTERNAME%\start-slapd.exe
%LDAP_ROOT%\slapd-%COMPUTERNAME%\stop-slapd.exe
2) start/stop admin server
%LDAP_ROOT%\start-admin.exe
%LDAP_ROOT%\stop-admin.exe
3) SUN ONE Console (iPlanet Console)
%LDAP_ROOT%\startconsole.exe
Gary

IPlanet directory server can't start in a user account - A bug?

I installed iplanet directory server 5.1 in Solaris 9. I am using typical install mode. I set UserA/GroupA to represent the directoy server that means the directory server instance running in this user account. After I input the user name and group name, it gives a very strange message, say "suffix must have a valid dn. Press any key to continue" After I press any key, it continue to do other setup. Once instllation done, if I try to login as that user account and start-slapd, it just give an error message, " iplanet/servers/bin/slapd/server do not have permission". I checked this directory, UserA do not have even read access to the directory.
So is this a bug in this verion of directory server/
Thanks,
Iris

It's very likely that you gave an Invalid DN for the Suffix of your directory instance...
The setup should have asked again the DN... It looks like a problem with the setup command.
Ludovic

Where can I get iPlanet Directory Server 4.1.3 for Linux

Hello everyone,
we are developing IMPS solution. but we need to support legacy system. How can we get a iPlanet Directory Server 4.1.3 for Linux for evaluation?
Many thanks
Billiken Xie

Why you want to have NDS 4.11? Any version of the NDS 4.1x will support Solaris 2.6 and 8. This version is nolonger available in iplanet's site. I suggest you to get NDS 4.13 or later version. At iplanet's web site, you will find the latest version, 4.16. Also, you will find 4.13 from Solaris 8's CD ording from Sun's reseller.
Lucas

Solaris 8 and iPlanet Directory Server 5.1: Help

Could anyone help with advice or where to find documentation of how to setup a Solaris 8 client machine to authenticate against iPlanet Directory Server 5.1? The only documentation (eg books, BluePrint articles) I can find cover iPlanet Directory 4.11 or 4.12 and a Solaris 8 client. Even the tools from the BluePrint Tools area at Sun only talk about using iPlanet Directory Server 4.11/12. Quite a lot seems to have change from iDS 4.12 to iDS5.1.
Any help would be greatly appreciated.
Thanks in advance,
Stewart

Hi Steven, I suppose that this question is identical to your other question: " Topic: solaris 8 client setup with solaris 9 ldap".
So the answer will be the same.
You may find what you are looking for in the following technical note: http://knowledgebase.iplanet.com/ikb/kb/articles/7966.html
It is called: "Cookbook for Solaris 8 client with Directory Server 5.1/Solaris 9"
Cheers / Damien.

Info about Japanese iPlanet Directory server

I am evaluating Japanese localized version of directory server.
I am not able to find any document which can tell me about the
localization of this product.
I have following questions:
1. What level of localization is done. Has console localized ?
Does log messages localized.
2. What env variables I need to set to see console GUI in Japanese
3. Do I need to set some env variables (like $LANG) before running the start script.
It is urgent for me, if somebody can answer these or point me to some good doc, it will great
help to me
Thanks
- Bharat

Hi,
Info about japanese iPlanet directory Server.
Gateway is localized for English, Japanese, French, Spanish, and German. You can configure the gateway to support additional locales.
Language files are stored in /usr/iplanet/servers/dsgw/html/lang and /usr/iplanet/servers/dsgw/config/lang, where lang is defined in RFC1766.
For example, language files for Japanese are stored in /usr/iplanet/servers/dsgw/html/ja and /usr/iplanet/servers/dsgw/config/ja[true]).
Support for the character sets necessary to render a particular locale (language) must be available in the browser's configuration.

Question re how iPlanet Directory Server applies the Look Through Limit.

I have a question on how iPlanet Directory Server applies the lookthrough limit...
I am running an LDAP search on a 4.13 directory. The search filter is:
"(&(rtrdaMaturityDate>=20020128)(rtrdaMaturityDate<=20020130))"
rtrdaMaturityDate is an int, and indexed with pres,eq,sub
There are 244680 entries where rtrdamaturityDate>=20020128
383005 entries where rtrdaMaturityDate<=20020130
484 entries which satisfy both conditions
When the query is run as Directory Manager it just hangs (presumably it would complete eventually).
When run as another user it gives a size limit error. The size limit and lookthrough limit on the directory are both 5000 . As the matching number of entries doesn't exceed the size limit, I think perhaps it is the lookthrough limit causing the problem...
It looks as if it treats each part of the filter separately, building an candidate list for each, giving an error if both reach the look through limit. i.e. it does not realise that both parts of the filter could be treated together.
Is this correct ?
This theory is born out by the fact that if I change the value so the filter would logically return only the highest few values, the search works (i.e. as if the <= filter condition hit LTL, but the >= did not).
Also, if I add another condition to give "(&(rtrdaIssuerBgNid=4403)(rtrdamaturityDate>=20020128)(rtrdaMaturityDate<=20020130))" then the search eventually correctly returns a single entry. (IssuerBgNid=4403 on its own gives 1004 entries).
Can I therefore assume that a seach will only work if at least one condition in the filter gives a candidate list with less entries than the look through limit?
Any advice on how to implement a range search like this would also be much appreciated.
Thanks,
Dave.

The lookthrough limit is reached when the resulting candidate list contains more entries than the limit...
Lookthrough limit has been implemented specifically to for Range filters (and OR filters) to avoid consuming too many resources.
For your particular problem, you can increase the lookthrough limit... but it will affect all users and searches.
Note that iPlanet Directory Server 5.x does provide a per User LookThrough Limit (and other limits as well), therefore you could just increase the lookthrough limit for the specific users performing these searches.
Regards,
Ludovic.

Store Print & File Server on iPlanet Directory Server?

I've a NT 4.0 server which I'm using as both a Print & File Server. Would I be able to use iPlanet Directory Server to do the same thing?
If I can, please explain how? or direct me to where I can know how?
If it can't be done, is there any other way(s) I can do it?
Thanks!

I don't understand. iDS is not a file and print server, it is a user data and user authentication server. Do you want to use iDS for your user authentication for file and print services instead of NT 4 domains? I don't think this is possible. What is possible is using iDS as your primary data store, and using iPlanet Meta Directory to sync changes from iDS to the NT 4 domain.

Last Logon Time in Iplanet Directory Server 4.1

Hi,
It would be great help if any one of you could let me know the attribute in Iplanet Directory Server 4.1 to get the Last Logon Time of a particular account.
The Directory Server is on solaris.
Thanks

Hari,
You can try to find it from the logfiles.
I actually designed a plugin for this type of thing, but it's not yet implemented. It would simply write a timestamp to a user's entry after every successful bind, among other things which I won't go into detail about now...
Oletko suomessa?
podzap

Installation Error with iPlanet Directory Server 5.1 SP1 and Windows 2000

Hello,
I'm having real trouble getting iPlanet Directory Server installed on a Windows 200 Server machine. Every time I install it, no matter what options I choose, I get this series of popup boxes at the end:
- Setup is unable to store configuration data in the LDAP directory
- Unable to create Administration Server configuration
- Could not authenticate ldap connection, "Unknown error"
- Unable to set ACI in Configuration Directory Server
But searching on this forum, I have found a lot of post. I have tested the different solution proposed :
* Add on the host file the short name and the long name of my machine with it's IP adress
* When the installation process crash, uninstall the software, reboot the machine and then restart the installation
With all this solution, the problem is always here.
Could you help me ?
Boris MANCHETTE

Are you using Terminal Services. iPlanet DS will not install properly over Terminal Services. You have to install from the direct attached console.
Ted

Problem with iPlanet Directory server v5.1

Hi all,
We have upgraded (parallel) from Netscape Directory server v4.2 to iPlanet Directory Server v5.1
Here are few issues that I�m experiencing.
1. In the directory view, all accounts are displayed by the user ID rather then the Common Name like it used to be with the Netscape Directory Server.
I can not find any options to change the view.
2. When searching for the user, once user is found, i can not do the right click to be able to delete the user. (was able to in the older version).
Any feedback will be greatly appreciated,
Thanks

I have a suggestion - try another means for administering your directory - use the console only for maintenance and tuning purposes. There are several products out there that are much better for day to day operations ...
Otherwise - I think with 5.1 the view is based on the rdn of the entries - and I am not sure it is customizable. Additionally I know 5.2 solved your second issue - maybe the latest SP of 5.1 has solved it as well - though I don't really know ...
-Chris Larivee

Installing Sun Java System Directory Server on RHEL 4

Hi All,
I have downloaded this ds[1].5.2.P4.linux.full.tar.gz for linux.
While installing Sun Java System Directory Server on RHEL 4.
I am getting this error
Installing Directory Server
|-1%--------------25%-----------------50%-java.io.FileNotFoundException: /opt/SunOneDirectoryServer/setup/admin/ns-common-sc hema.conf (Not a directory)
at java.io.FileOutputStream.open(Native Method)
at java.io.FileOutputStream.<init>(FileOutputStream.java:179)
at java.io.FileOutputStream.<init>(FileOutputStream.java:131)
at com.sun.install.products.ZipUnit.install(ZipUnit.java:354)
at com.sun.install.products.InstallComponent.performInstallation(InstallComponent.java:1223)
at com.sun.install.products.InstallNode.startInstall(InstallNode.java:878)
at com.sun.install.products.InstallComponent.performInstallation(InstallComponent.java:1220)
at com.sun.install.products.InstallNode.startInstall(InstallNode.java:878)
at com.sun.install.products.InstallComponent.performInstallation(InstallComponent.java:1220)
at com.sun.install.products.InstallNode.startInstall(InstallNode.java:878)
at com.sun.install.products.InstallComponent.performInstallation(InstallComponent.java:1220)
at com.sun.install.products.Product.performInstallation(Product.java:641)
at com.sun.install.tasks.ProductTask.perform(ProductTask.java:191)
at com.sun.wizards.core.Sequence.perform(Sequence.java:336)
at com.sun.wizards.core.SequenceManager.run(SequenceManager.java:226)
at java.lang.Thread.run(Thread.java:534)
----------------75%--------------100%|
Can anyone please help on this
Thanks in Advance

It looks like your archive is corrupted.
I would suggest that you download a new copy, and even better that you use the most recent version of Directory Server (6.2, although it is not yet on the download page -it should be by the end of the week-, 6.1 is available through the Enterprise Edition).
Regards,
Ludovic.

Oracle Portal for LDAP Authentication using Iplanet directory server

I have oracle portal on solaries machine and Iplanet directory server 5.1 on windows NT,
Can i user portal user authentication Iplanet LDAP.
Regards
srinivas

Yes You can. You have to provide the necessary info while running the ssoldap.sql.
Vinodh R.

Are there any known issues concerning using DIGEST-MD5 SASL authentication with iPlanet Directory Server 5.0 on Windows NT 4.0?

I am developing support for the DIGEST-MD5 sasl mechnism on a c-ldap client. I am using the evaluation version of the iPlanet Directory Server 5.0 which lists DIGEST-MD5 as a supported SASL mechanism. The server is running on NT 4.0 After installing the Directory Server with the test database, a changed the passwordStorageScheme from the default of SSHA to clear text. I then added my test user. When I run my test I always get back a resultCode of 49 (invalidCredentials). The digest-challenge I receive from the server and my digest-response are shown below. I have satisfied myself that the calculation of the response directive in the digest response is correct. Does anyone see any problems in the digest response or have any other suggestions? Is there a known problem with the iPlanet Directory Server 5.0?
digest-challenge:
realm="BGB2.ndp.provo.novell.com",nonce="Ed8UPLXsWaC6CN",qop="auth",algorithm=md5-sess,charset=utf-8
digest-response:
username="uid=bgbrown,ou=people,dc=siroe,dc=com",realm="BGB2.ndp.provo.novell.com",cnonce="A9IuPJKr30RiwL",nc=00000001,qop=auth,digest-uri="ldap/BGB2.ndp.provo.novell.com",response=97061205298e5ebaf206c8ac3598fdce,charset=utf-8,nonce="Ed8UPLXsWaC6CN"

Found the answer. When the username is an LDAP DN it needs to be proceeded by "dn:".
example: username="dn:uid=bgbrown,ou=people,dc=siroe,dc=com"
The server also accepts a simple uid value.
example: username="bgbrown"

Linux version of iPlanet Directory Server 5.0 planned?

I'm wondering if there are plans to release a Linux version of iPlanet
Directory Server 5.0?
If so, any estimation on when it might be released?
Jon

I asked the same question and was told .....
Subject: Re: iDS 5.0 is officially released
Date: Tue, 15 May 2001 06:00:09 -0600
From: Richard Megginson <[email protected]>
To: [email protected]
All I can say at the moment about Linux support is that we are
currently
evaluating our options.
Peter Allmaker wrote:
Swell. And the Linux version will release when???------------------
Jonathan Eric Miller wrote:
>
I'm wondering if there are plans to release a Linux version of iPlanet
Directory Server 5.0?
If so, any estimation on when it might be released?
Jon--
Peter Allmaker
MCLA Computer Science 413-662-5592
Computer Support Services 413-662-5510

Can`t install CA in iPlanet Directory Server 5.0 ??

Similar Messages

Maybe you are looking for