Commadmin

Hello, we have a sun communication suite 5.
I crete a script to create user in our domain and add it to a group.
When I add user to a group, I received this output error:
FAIL
Unable to update user attribute.::LDAP Error:The specified attribute could not be found.^351^16
In errors log:
ERROR<5399> - Entry - conn=-1 op=-1 msgId=-1 - Entry error occurred while removing attribute values. Could not find value 0 for attribute iplanet-am-static-group-dn (No such attribute).
The user is added to group, but, in user's ldif I haven't information about this.
Can you help me?
Thank you
@,'-

I've had the exact problem. It is indeed a bug in that version of commadmin.
You can work around it. Use the commadmin group modify with the -A+mgrpRFC822MailMember flag. That does work.
Be careful if you use the -A-, though. Removing a member if you happen to try to remove a blank removes ALL members.

Similar Messages

Messaging Server commadmin and running example programs

Hi
1.I am trying to add users to SunMessaging Server (i have installed the identity server and can login to the console ), when i use the commadmin command i Get a Internal server error , the following is the Error in the server Logs
2. There are some particluar examples that come with the messaging server , they are in the directory examples (hello_world.c) ... i am unable to compile them ...i get a linking error as given below (after the messaging server error)
SEVERE (10997): StandardWrapperValve[commLDAPAuth]: Servlet.service() for s
ervlet commLDAPAuth threw exception
javax.servlet.ServletException: com.sun.identity.authentication.spi.AuthLoginException: null
Failed to create New AuthContext: Error while processing XML request
XML response is either Empty or Invalid
        at sun.comm.cli.server.servlet.commAuth.execute(commAuth.java:183)
        at sun.comm.cli.server.servlet.commServlet.doPost(commServlet.java:90)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
        at org.apache.catalina.core.StandardWrapperValve.invokeServletService(StandardWrapperValve
.java:720)
        at org.apache.catalina.core.StandardWrapperValve.access$000(StandardWrapperValve.java:118)
        at org.apache.catalina.core.StandardWrapperValve$1.run(StandardWrapperValve.java:278)
        at java.security.AccessController.doPrivileged(Native Method)
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:274)
        at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:505)
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:212)
        at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:505)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:203)
        at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:505)
        at com.iplanet.ias.web.connector.nsapi.NSAPIProcessor.process(NSAPIProcessor.java:158)
        at com.iplanet.ias.web.WebContainer.service(WebContainer.java:598)
Compile using
gcc hello_world.c -I/opt/SUNWmsgsr/include/ -L/opt/SUNWmsgsr/lib/ -limta -lsocket -lgen -lintl -lnsl -lpthread -lc -ldl -lposix4 -lm
Undefined                       first referenced
symbol                             in file
mtaErrno                            /var/tmp//ccKjYt2c.o
mtaEnqueueTo                        /var/tmp//ccKjYt2c.o
mtaEnqueueStart                     /var/tmp//ccKjYt2c.o
mtaEnqueueWriteLine                 /var/tmp//ccKjYt2c.o
mtaPostmasterAddress                /var/tmp//ccKjYt2c.o
mtaDone                             /var/tmp//ccKjYt2c.o
mtaInit                             /var/tmp//ccKjYt2c.o
mtaDateTime                         /var/tmp//ccKjYt2c.o
mtaEnqueueFinish                    /var/tmp//ccKjYt2c.o
mtaStrError                         /var/tmp//ccKjYt2c.o

I'm not sure what exactly you're trying to do.
Once you install commcli, you should be able to use the command-line tools. They work, but you have to have been consistant in giving answers to all the questions asked.
You also may not share the amadmin password with any other password. It must be unique.
There is no need to compile anything to get Messaging Server to work, or to provision it with commcli.

Failed to add mail service by commadmin

I installed Communications Suite 6 update 2 with Appserver 9.1 u2 and DS 6.3.1.
I tried "DL" mode without AM. config-commda script was succeded, but error occored by commadmin.
# ./commadmin domain modify -D admin -w $adminpass -n $domain -d $domain -S mail,cal -H $mailhost
FAIL
netscape.ldap.LDAPException: error result (20)
What cause this error?
I can login DA and make subdomain, but cannot allocate service pkg to default domain by same error (err=20).

kawauso wrote:
I retried commadmin after removed "preferredMailHost" attribute,
but I got err=20 again.
DS errors log
[14/May/2009:03:58:50 +0900] - INFORMATION - conn=-1 op=-1 msgId=-1 - normalize_ava_cb: invalid attribute type: 'o
[14/May/2009:03:58:50 +0900] - ERROR<5398> - Entry - conn=-1 op=-1 msgId=-1 - Duplicate value addition in attribute "objectClass" of entry "o=test.com,o=isp"It appears the commadmin tool doesn't like one of the objectclass values you have set -- most likely the objectclass: mailDomain.
For comparison purposes this is a freshly created domain with no services enabled:
dn: o=noservice.domain.com,o=isp
objectClass: top
objectClass: organization
objectClass: sunmanagedorganization
objectClass: sunnamespace
objectClass: sundelegatedorganization
inetDomainStatus: active
sunMaxUsers: -1
sunNumUsers: 0
sunMaxGroups: -1
sunNumGroups: 0
sunPreferredDomain: noservice.domain.com
sunOrgType: full
sunEnableGAB: false
sunNameSpaceUniqueAttrs: uid
o: noservice.domain.comI then enable all services by running this command:
./commadmin domain modify -D admin -w password -n aus.sun.com -d noservice.domain.com -S mail,cal,im -H server.aus.sun.com Which then results in:
dn: o=noservice.domain.com,o=isp
objectClass: top
objectClass: organization
objectClass: sunmanagedorganization
objectClass: sunnamespace
objectClass: sundelegatedorganization
objectClass: icscalendardomain
objectClass: inetdomainauthinfo
objectClass: maildomain
inetDomainStatus: active
sunMaxUsers: -1
sunNumUsers: 0
sunMaxGroups: -1
sunNumGroups: 0
sunPreferredDomain: noservice.domain.com
sunOrgType: full
sunEnableGAB: false
sunNameSpaceUniqueAttrs: uid
o: noservice.domain.com
preferredMailHost: server.aus.sun.com
icsStatus: active
icsTimezone: America/Denver
mailDomainStatus: active
mailAccessProxyPreAuth: no
sunRegisteredServiceName: UserCalendarService
sunRegisteredServiceName: DomainMailService
sunRegisteredServiceName: DomainIMService
sunRegisteredServiceName: UserMailService
sunRegisteredServiceName: DomainCalendarService
sunRegisteredServiceName: GroupCalendarService
sunRegisteredServiceName: UserIMService
sunRegisteredServiceName: GroupMailServiceRegards,
Shane.

Commadmin create user inputfile wrong character set

hi!
im adding several users with non-ascii characters through inputfile (-i) with commadmin:
l recepciosavinyeta
F Recepci�
L Sa Vinyeta
W passtest
d example.com
S mail,cal
E [email protected]
[...]when i go to DA i can see Recepci� is not displayed correctly, so i presume is something related to character set.
these are my locales:
# locale
LANG=es_ES.ISO8859-15
LC_CTYPE=es_ES.ISO8859-1
LC_NUMERIC=es_ES.ISO8859-15
LC_TIME="es_ES.ISO8859-15"
LC_COLLATE=es_ES.ISO8859-15
LC_MONETARY=es_ES.ISO8859-15
LC_MESSAGES=es
LC_ALL=
./imsimta version
Sun Java(tm) System Messaging Server 6.3-0.15 (built Feb 9 2007)
libimta.so 6.3-0.15 (built 19:17:24, Feb 9 2007)
SunOS silmail 5.10 Generic_120012-14 i86pc i386 i86pcthanks in advance.

Hi,
I couldn't find any record of somebody attempting to use non-ascii characters in the commadmin command, so I cannot offer any steps to assist in this. I suggest you log a support case.
Regards,
Shane.

Commadmin user modify won't configure an existing user for e-mail

Good day,
On a new installation, I am receiving the following error message:
com.iplanet.am.sdk.AMException: Service not assigned.
when I try and use commadmin user modify to give e-mail service to a user. When I directly edit the JES DS directory entries directly, e-mail service is provisioned. This looks like a basic omission on my part (I'm quite new to JES); can anyone point me to a solution basing on this information or is more needed?
Cheers,

Hello Jay,
Thanks for following me up.
I also tried using commadmin user create - see my first reply to your post. In that case, the reply was still "FAIL<cr> Service UserMailService not registered". As regards the attributes, I agree with your point but I had taken the precaution of extending the entries manually with extra attributes. I'm not at my workplace right now so I can't report back but there were a few inet-something attributes among them. Incidentally, after I added the attributes, the icon in DS Console changed from the generic round one to the user type.
Now some updates from my side because I couldn't log in to the forum earlier to post:
The thread I referred to in earlier posts didn't help. "User Mail Service" showed up under AM console as a service allocated to my organization mydomain.com but the commadmin user create still came back with the usual "FAIL<cr> Service UserMailService not registered". This notwithstanding that the organization container mydomain.com had the sunregisteredservice=UserMailService attribute-value pair set, coming from the earlier command commadmin domain modify -D daadmin -w dapassword -n mydomain.com -d mydomain.com -H mymailhost.mydomain.com.
So as a wild guess, I added the attribute sunregisteredservice to the ou=people container below the o=mydomain.com organization and gave this attribute the value UserMailService. Then, finally, the commadmin user create command gave me the OK.
So the next question is: why did I have to add the attribute to the ou=people container? On a separate test system that I set up for planning (this is one case where the simulation fell really short of reality!), I didn't need to add the attribute to the people container - just to the parent organization.
Cheers

Can't modify users via commadmin or DA after adding services

after adding the following services
Authentication Configuration
Instant Messaging Service
Presence Service
i cannot modify users via commadmin (string index error -6) or via the DA (save operation failed) nothing in the slapd logs (error or access) - after removing these services i can modify via the DA.
is this a known bug (or a feature?).
after modifying, i can re add the services and proceed as normal.
thanks,
s7

you can try what worked for me:
remove services from user (in amconsole web app http://jes-server/amconsole) -
login as admin, search specific user, see their services, remove them -
run your commadmin command - it should work now
re-add the removed services.

How to change password with commadmin command?

I am using JES 2004Q2, Directory shema2.
HOw to change password for email account ?
Email account created in identity server with commadmin comand.
I can't find this information in :
"Sun Java System Communications Services 6 2004Q2 User Management Utility Administration Guide"

http://docs.sun.com/source/817-5703/commcli_ref.html#wp1021656
commadmin doesn't seem to offer a password modify/replace option.
You can use the Directory Console to replace a password, or ldapmodify, or webmail/comms express.

4.0.0 temporary error returned by alias expansion (commadmin)?

I've installed java_es_05Q4_uwc-ga-solaris-sparc.zip (messaging, calendar, directory server). I'm running into the alias expansion error denoted in the subject.
The following forum link contains a suggestion from Jay to use commadmin to create the messaging users/accounts.
http://swforum.sun.com/jive/thread.jspa?threadID=23167&messageID=56207
I can't seem to find a commadmin binary in my installation. Is this another package that I'd need to install? Could someone point me to it?
thx,
ZB

I've installed java_es_05Q4_uwc-ga-solaris-sparc.zip (messaging, calendar, directory server). I'm running into the alias expansion error denoted in the subject.
The following forum link contains a suggestion from Jay to use commadmin to create the messaging users/accounts.
http://swforum.sun.com/jive/thread.jspa?threadID=23167&messageID=56207
I can't seem to find a commadmin binary in my installation. Is this another package that I'd need to install? Could someone point me to it?
thx,
ZB

Java error on commadmin command

Sun One Messaging server 6.0 Patch 1 (built Jan 28 2004)
I am getting this Java error on this command
# ./commadmin domain create -D admin -d efg.com -n abc.com -w password -S email,cal -H test.abc.com
Internal Server Error: Internal Server Error
java.io.IOException: Internal Server Error: Internal Server Error
at sun.comm.client.CLIObject.authenticate(CLIObject.java:967)
at sun.comm.client.CLITask.doStuff(CLITask.java:175)
at sun.comm.client.CommAdmin.main(CommAdmin.java:278)
Invalid value for Identity server host name: test.abc.com
Invalid value for Identity server port: 82
Enter Identity server port[82]:
Enter Identity server host name[test.abc.com]: test.abc.com
Internal Server Error: Internal Server Error
java.io.IOException: Internal Server Error: Internal Server Error
at sun.comm.client.CLIObject.authenticate(CLIObject.java:967)
at sun.comm.client.CLITask.doStuff(CLITask.java:175)
at sun.comm.client.CommAdmin.main(CommAdmin.java:278)
Invalid value for Identity server host name: test.abc.com
Invalid value for Identity server port: 82
Enter Identity server port[82]:
As I install the JES as shown below
I chose the Custom Install option for each application
) Installed Application Server, Directory Server and Admin Server. Did not install sample data.
) Started Application Admin Server
/var/opt/SUNWappserver7/domains/domain1/admin-server/bin/startserv
) Then created a new instance called `server1'
) Installed Identity Server in the newly created Application Server instance server1
) I verified Identity server was accessible and working correctly
) Installed Messaging Server & Calendar Server
) Executed 'perl comm_dssetup.pl'
Server Root : /var/opt/mps/serverroot
Server Instance : slapd-test
Users/Groups Directory : Yes
Update Schema : yes
Schema Type : 2
DC Root : o=abc.com
User/Group Root : o=abc.com
Add New Indexes : yes
Directory Manager DN : cn=Directory Manager
) Setup additional Indexes & added Self Ref. Plug-in to LDAP server then restarted LDAP server and Application server.
) Executed /opt/SUNWcomm/sbin/config-iscli
Chose to put users in Base DN as this is simple test system
./asadmin deploy user admin password <pw> --instance server1 \
host test.abc.com port 4848 name commcli contextroot commcli \
/opt/SUNWcomm/lib/jars/commcli-server.war
)permission java.util.PropertyPermission "*", "write"; to /var/opt/SUNWappserver7/domains/domain1/server1/config/server.policy
) Restarted Application Server
) Executed /opt/SUNWmsgvr/sbin/configure
) Added Mail service from /opt/SUNWam/samples/integration
/opt/SUNWam/bin/amadmin \
--runasdn uid=admin,ou=People,o=abc.com,o=abc.com\
password <pw> schema sampleMailServerService.xml
) Created a domain to Registered the simple Mail service in Identity Manager.
# ./commadmin domain create -D admin -d efg.com -n abc.com -w password -S email,cal -H test.abc.com

I did change the amAdmin password, because I was using the same password for admin and amAdmin.
I can log in to http://server_name:82/amserver with amAdmin username and password (even at that time as well when I was using the same password for admin and amAdmin). Its means integration between directory and identity is ok because I can see correct credentials for LDAP under service configuration tab on amconsole link.
So it seems like the commcli is not working correct. Should I have to delete the application hosted under server1 and deploy it again using commcli-server.war, Under directory server delete all the entries under o=comms-config for commcli and commcli itself and run the config-iscli again?

Dinamic group creation with commadmin

I�ve been trying to create a dinamic group in Java Enterprise System fof Messaging Server with this command:
commadmin group create -D admin -G CB057001 -n myuniv.edu.co -w passwd -i dinamicgroup.dat
The group is created but static:
cn: CB057001
iplanet-am-group-subscribable: false
objectClass: iplanet-am-managed-static-group
objectClass: groupofuniquenames
objectClass: top
objectClass: iplanet-am-managed-group
The dinamicgroup.dat file contain:
d eafit.edu.co
f ldap:///ou=People,o=myuniv.edu.co,dc=myuniv,dc=edu,dc=co??sub?(&(objectclass=usermyuniv)(matgroup=CB057001))
p 8080
S mail,cal
H dirhost.myuniv.edu.co
E [email protected]
Could you tell me whats wrong?
How can I force to just members sent mail to the group?

From the 6.0 training:
Task 6 - Create a Dynamic Group
In the previous task, you added sample2 and sample3 users with the attribute ou=groupl. You will create a dynamic group using an Idap filter
based on this attribute. Complete the following step:
Create a dynamic group based on the ou=groupl attribute as the domain administrator:
./commadmin group create -D sample -G group_one
-w password -n example.com -d example.com
-f 'Ldap:///o=sunone??sub? (&(objectclass=person) (ou=groupl))'
-E [email protected] -S mail

Commadmin domain purge failing

Dear All,
The commadmin domain purge is failing to purge users marked as deleted, even the command itself is being exectied successfully.
Noting that i am using AM 7.1 and DA 6.4, what might be the reason behind?
Thanks

I have set the nssizelimit on the account to -1 (unlimited) as indicated in the ldapsearch output but it still fails at 4000 entries.

User created by commadmin cant login

Hi,
I have an interesting problem: If I create user
using commadmin user add and try to log into
Sun Messenger Expres, it will say that user
doesn't exist.
But if I try commadmin user search or
ldapsearch, both succesfully found my new
user.
Where is a problem ?

Have you added the mail service to your IS?
/opt/SUNWam/bin/amadmin \
--runasdn uid=admin,ou=People,dc=<RootSuffix> \
password <pw> schema /opt/SUNWam/samples/integration/sampleMailServerService.xml
See /opt/SUNWam/samples/integration/Readme.html for more info.
You then need to register this service in IS.
Shaun

Commadmin domain purge failing at 4000 entries

It looks as if there is a limit to the # of entries that commadmin domain purge will handle.
In the directory server log .....
[22/Jun/2005:13:29:22 -0400] conn=1910901 op=75694 msgId=140949 - SRCH base="o=uwo.ca,dc=its" scope=2 filter="(|(&(sunPreferredDomain=%V)(inetDomainStatus=deleted))(inetgroupstatus=deleted)(inetUserStatus=deleted)(&(objectClass=sunManagedOrganization)(inetDomainStatus=deleted))(icsStatus=deleted))" attrs="objectClass objectClass" authzid="dn:uid=admin,ou=people,o=uwo.ca,dc=its"
[22/Jun/2005:13:30:44 -0400] conn=1910901 op=75694 msgId=140949 - RESULT err=4 tag=101 nentries=4000 etime=82 notes=U
I increased the nstimelimit/nslookthroughlimit/nssizelimit on the account I am using
ldapsearch -h xxxx.xxxx.com -b dc=its uid=admin nssizelimit nslookthroughlimit nstimelimit
uid=admin, ou=People, o=uwo.ca,dc=its
nssizelimit=-1
nslookthroughlimit=-1
nstimelimit=-1
I ran into a problem with msuserpurge which was solved by increasing the local.ldapsearchtimeout configutil parameter. Is there a similar parameter for the commadmin utility?
Thanks
steve

I have set the nssizelimit on the account to -1 (unlimited) as indicated in the ldapsearch output but it still fails at 4000 entries.

Problem installing aJES 05Q4 ccording to deployment example - commadmin

I have ran into problems installing JES 2005Q4 according to the deployment example. All goes smoothly until modifying mail and calendar domains with commadmin.
When running
/opt/SUNWcomm/bin/commadmin domain modify -D admin -w adminpass -X host.domain.net -n domain.net -p 80 -d domain.net -S mail,cal -H host.domain.net
it just gives errors:
Invalid value for login ID: admin
Invalid value for login password
Invalid value for login domain: domain.net
and in amAuthentication.error log there's:
"2005-12-07 21:44:45" "User Profile does not exist|module_instance|LDAP" LDAP AUTHENTICATION-270 o=domain.net,o=isp "Not Available" INFO "Not Available" "Not Available" "cn=dsameuser,ou=DSAME Users,o=isp "Not Available"
Also amConsole session times out in like 5 seconds even through the time-out settings are ok.
I'm running Solaris 10 with all the latest patches. The 05Q4 isn't patched.
Any ideas how to go about solving this?

one additional piece of information when examining the logs:
config-commda installation log has one warning at the beginning, it says that "gethostname failed to return a fully qualified hostname".
How can I check if I have my hostname configuration OK? hostname command returns just the plain hostname and "check-hostname" says that the fully qualified hostname is ok.
Could this be somehow related to the problems I'm experiencing?

Java exception with commadmin create user command

Hi,
I should very much like to get Messaging Server running in conjunction with Identity Server.
Ideally I would like Identity Server to be accessible via an Application Server instance.
So far I have succeeded in installing Directory Server, Administration Server, Application Server and Identity Server.
I have two problems:
When I executed commadmin to create a mail user I used this command:
/opt/SUNWcomm/bin/commadmin user create -v -D amAdmin -n acc.graddelt.com
-w <pw> -F test -l test -L test -W <pw> -S mail -H trabant.acc.graddelt.com
I then get a Java error:
[17/Feb/2004:15:16:35] SEVERE (14419): StandardWrapperValve[commLDAPAuth]: Servlet.service() for se
rvlet commLDAPAuth threw exception
java.security.AccessControlException: access denied (java.util.PropertyPermission user.language wri
te)
on the Application Server
Second problem:
I've setup the HTTP server component of Messenger Server to listen on port 81, but I only get
the Application Server default page instead of the Messenger Server Web Interface.
I think both problems may be caused by the way I installed these JES components, so
I enclose the procedure here:
I chose a Base DN of dc=acc.graddelt.com without a sub organisation.
I chose the Custom Install option for each application
) Installed Application Server, Directory Server and Admin Server. Did not install sample data.
) Started Application Admin Server
/var/opt/SUNWappserver7/domains/domain1/admin-server/bin/startserv
) Then created a new instance called `server1'
) Installed Identity Server in the newly created Application Server instance server1
) I verified Identity server was accessible and working correctly
) Installed Messaging Server & Calendar Server
) Executed 'perl comm_dssetup.pl'
Server Root : /var/opt/mps/serverroot
Server Instance : slapd-trabant
Users/Groups Directory : Yes
Update Schema : yes
Schema Type : 2
DC Root : dc=acc.graddelt.com
User/Group Root : dc=acc.graddelt.com
Add New Indexes : yes
Directory Manager DN : cn=Directory Manager
) Setup additional Indexes (http://docs.sun.com/source/816-6874/std-comp-inst.html#wp28563)
& added Self Ref. Plug-in to LDAP server then restarted LDAP server and Application server.
) Executed /opt/SUNWcomm/sbin/config-iscli
Chose to put users in Base DN as this is simple test system
) Updated App server as per http://docs.sun.com/source/817-4216-10/config.html
./asadmin deploy user admin password <pw> --instance server1 \
host trabant port 4848 name commcli contextroot commcli \
/opt/SUNWcomm/lib/jars/commcli-server.war
) Restarted Application Server
) Executed /opt/SUNWmsgvr/sbin/configure
) Added Mail service from /opt/SUNWam/samples/integration
/opt/SUNWam/bin/amadmin \
--runasdn uid=admin,ou=People,dc=acc.graddelt.com \
password <pw> schema sampleMailServerService.xml
) Created a User with uid test and Registered the simple Mail service in Identity Manager.
) Setup a user account in Messaging Server
/opt/SUNWcomm/bin/commadmin user create -v -D admin -F test -n acc.graddelt.com -l test -w <pw>
-W <pw> -L test -S mail -H trabant.acc.graddelt.com
I'm running JES 03Q4 on a Solaris 8 420R. The system is fully patched and up to date
Many thanks
Shaun

Two questions:
[17/Feb/2004:15:16:35] SEVERE (14419): StandardWrapperValve[commLDAPAuth]: Servlet.service() for se
rvlet commLDAPAuth threw exception
java.security.AccessControlException: access denied (java.util.PropertyPermission user.language wri
te)
on the Application Server
This looks like an acl problem. A default installation should not have this, so, we're looking at what might have gone wrong with your installation, or what was changed. Let's start with looking at file permissions and such. I believe JES installer defaults to installing the container for Identity and Identity as root. Did you change this? If so, you need to check file ownership and permissions.
Second problem:
I've setup the HTTP server component of Messenger Server to listen on port 81, but I only get
the Application Server default page instead of the Messenger Server Web Interface.
This means that you installed App Server to also respond on port 81. You cannot have two different products listening to ther same port. You will need to change one or the other.

Commadmin

Similar Messages

Maybe you are looking for