Conection from Solaris is not working with Proxy (RedHat Linux is)

We have a physical box running Solaris 10 with two zones. One zone is running the Sun LDAP DS (Directory Server) and the second zone is running Sun LDAP DPS (Directory Proxy Server). Sun LDAP EE version is 6.3.1.
From the RedHat Linux client box (which in fact is an IFL guest running on Z-series IBM Mainframe) its possible to authenticate user accounts via the DPS zone.
From the Solaris client box, we can only authenticate the accounts when connecting directly to the DS zone.
We see in messages:
Jun 4 15:29:00 wgtzgh2 sshd[4076]: [ID 293258 auth.error] libsldap: Status: 32 Mesg: openConnection: simple bind failed - No such object
Jun 4 15:29:00 wgtzgh2 last message repeated 3 times
Jun 4 15:29:00 wgtzgh2 sshd[4076]: [ID 293258 auth.warning] libsldap: Status: 7 Mesg: Session error no available conn.
Jun 4 15:29:00 wgtzgh2 sshd[4070]: [ID 800047 auth.error] error: PAM: No account present for user for illegal user l618320 from wgwlgaz.nz.thenational.comBelow are the configuration used for the Solaris and Linux boxes, along with a bad drawing of our network.
Any ideas why we can't authenticate from our Solaris client using the Proxy (DPS) connection?
Thank you
-- Andreas
.                        10.64.6.x
+----------------------+    |
|    directory server |----+
+----------------------+    |
                            |
                            |
+----------------------+    |
|directory proxy server|----+
+----------------------+    |
                            |
                        +--------+
                        | router |
                        +--------+
                            | |
+------------+ 10.69.193.x | |
|RedHat Linux|--------------+ |
+------------+              | |
                              |
+----------+ 10.64.28.x       |
| Solaris |------------------+
+----------+                  |
# ldapclient list
NS_LDAP_FILE_VERSION= 2.0
NS_LDAP_BINDDN= cn=proxyagent,ou=profile,dc=nz,dc=thenational,dc=com
NS_LDAP_BINDPASSWD= {NS1}41fa88f3a945c411
NS_LDAP_SERVERS= wgpsdps01.nz.thenational.com, akpsdps01.nz.thenational.com
NS_LDAP_SEARCH_BASEDN= dc=nz,dc=thenational,dc=com
NS_LDAP_AUTH= tls:simple
NS_LDAP_SEARCH_SCOPE= one
NS_LDAP_SERVER_PREF= wgpsdps01.nz.thenational.com
NS_LDAP_CACHETTL= 0
NS_LDAP_CREDENTIAL_LEVEL= proxy
NS_LDAP_SERVICE_SEARCH_DESC= netgroup:ou=netgroup,dc=nz,dc=thenational,dc=com?sub
NS_LDAP_SERVICE_SEARCH_DESC= shadow:ou=People,dc=nz,dc=thenational,dc=com?one
NS_LDAP_SERVICE_SEARCH_DESC= passwd:ou=People,dc=nz,dc=thenational,dc=com?one
NS_LDAP_SERVICE_SEARCH_DESC= group:ou=group,dc=nz,dc=thenational,dc=com?one
NS_LDAP_BIND_TIME= 30
NS_LDAP_HOST_CERTPATH= /var/ldap/cacerts
wgtitts3:~ # cat /etc/ldap.conf
base dc=nz,dc=thenational,dc=com
## Search Scope
scope sub
## Bind Policies
bind_timelimit 1
bind_policy soft
idle_timelimit 3600
pam_filter objectclass=posixaccount
pam_login_attribute uid
#pam_password md5
nss_base_passwd         ou=people,dc=nz,dc=thenational,dc=com?one
nss_base_shadow         ou=people,dc=nz,dc=thenational,dc=com?one
nss_base_group          ou=group,dc=nz,dc=thenational,dc=com?one
nss_base_netgroup       ou=netgroup,dc=nz,dc=thenational,dc=com?sub
nss_initgroups_ignoreusers root, bin, daemon, adm, lp, sync, shutdown, halt, mail, news, uucp, operator, games, gopher, ftp, nobody, dbus, avahi, nscd, vcsa, pcap, mailnull, smmsp, haldaemon, rpc, ntp, rpcuser, sshd, rpm, xfs, gdm,
## Finally some SSL configuration
ssl start_tls
tls_checkpeer yes
tls_cacertdir /etc/openldap/cacerts
host akpsdps01.nz.thenational.com wgpsdps01.nz.thenational.comEdited by: Bank_Of_New_Zealand on 4/06/2009 16:33

Hello,
The DPS log output for that time:
[04/Jun/2009:15:29:00 +1200] - CONNECT    - INFO - conn=211417 client=10.64.28.106:55111 server=wgpsdps01:636 protocol=LDAPS
[04/Jun/2009:15:29:00 +1200] - PROFILE    - INFO - conn=211417 assigned to connection handler cn=default connection handler, cn=connection handlers, cn=config
[04/Jun/2009:15:29:00 +1200] - OPERATION - INFO - conn=211417 op=0 BIND dn="cn=proxyagent,ou=profile,dc=nz,dc=thenational,dc=com" method
="SIMPLE" version=3
[04/Jun/2009:15:29:00 +1200] - SERVER_OP - INFO - conn=211417 op=0 BIND dn="cn=proxyagent,ou=profile,dc=nz,dc=thenational,dc=com" method
="SIMPLE"" version=3 s_msgid=7230 s_conn=data source wgpsds01:6
[04/Jun/2009:15:29:00 +1200] - SERVER_OP - INFO - conn=211417 op=0 BIND RESPONSE err=32 msg="" s_conn=data source wgpsds01:6
[04/Jun/2009:15:29:00 +1200] - OPERATION - INFO - conn=211417 op=0 BIND RESPONSE err=32 msg="" etime=0
[04/Jun/2009:15:29:00 +1200] - DISCONNECT - INFO - conn=211417 reason="other" msg="Exception caught while polling client connection LDAPS
.10.64.28.106.55111 -- java.io.IOException: Received CLOSED during initial handshaking" {code}
Cheers
Edited by: Bank_Of_New_Zealand on 5/06/2009 11:30

Similar Messages

Java Web Start not working with Proxy

I have Java Web Start program not listening to proxy settings. It tries to access localhost using our proxy settings, but with no user name or password. I'm wondering if Java Web Start has proxy settings somewhere. I'm not sure since when we disable the proxy settings the program works without issue. Any thoughts?
Thanks

For instance Safari uses those System Proxy settings, Firefox uses it's own!
So Java is using it's own, now we're waiting for an expert to drop in!

Wifi from iPhone hotspot not working with iPad 2

I cannot get my iPad 2 to connect to my iPhone 4 via the personal hotspot feature. If it does connect, it does not connect to safari or mail.

Sclifford-
I assume you have verified that the iPhone hotspot works with another computer.
It might help to reset the iPad's network. Go to Settings-General-Reset-Reset Network Settings. You will then need to reconnect the WiFi.
Fred

7.03 still not working with proxy - while 6.5 did !

Hello,
I am really annoyed. I tried to watch the special event, but my 6.5. player opened and told me that I needed 7 to watch this. So I downloaded it, installed it and No Go !!
I am asked to authenticate against our proxy/firewall, I type in my info and after some minutes I get the response Invalid Url.
Nothing in the prefs seems to change this behaviour.
Seems that Apple has broken something, that used to work beforehand. Hope that this is fixed soon.
Greetings
Thomas

I also had this problem. WIth the old 6.5 there was a way within the preferences to specify SOCKS and HTTP proxies.
With 7.0 this was removed. It appears that it now reads these settings directly from the IE proxy settings. If you're having issues you may need to go into the IE proxy settings and fiddle there.
Good luck !

Solaris 8 not working with Windows ICS

I have a Windows 98 SE machine running ICS (it is the host). From my Solaris 8 / Sparc machine (ICS client) I can ping internal and external address. I can traceroute to external servers with success. When trying to load a page in netscape (using both URL or IPaddress) it times out and cannot load the page. I am connected via a cable modem to an @home network. I have created a resolv.conf file and a defaultrouter file, and have added the dns option in nsswitch.conf.
Any thoughts?

Can you "telnet www.sun.com 80" from your solaris box?
Any error messages?
The expected answer is:
Trying 192.18.97.241...
Connected to www.sun.com.
Escape character is '^]'.
Once connected, yype "HEAD / HTTP/1.0" + 2 times RETURN:
HEAD / HTTP/1.0
HTTP/1.1 200 OK
Server: Netscape-Enterprise/3.6
Date: Tue, 15 May 2001 12:07:02 GMT
Set-cookie: sessionid=SKDVAEAAAO2L3AMTA1LU4GQ;path=/
Set-cookie: sun_visitor_uid=3630303436393033395e30;domain=.sun.com;expires=Fri, 29-Jun-2001 12:30:35 GMT;path=/
Content-type: text/html
Content-length: 14231
Connection: close
Connection closed by foreign host.

Why does Create PDF from Web Page not work with certain URLs?

I'm creating a large number of PDFs from Web Pages on Adobe Acrobat XI Pro and occasionally come across certain URLs that fail to generate a web page. The process begins as normal but eventually the status window lists a few errors or canceled processes and that there are now 0 Connections Active. This only occurs for certain URLs, but when it happens it consistently fails for that URL (as in trying it a few mroe times doesn't let it work). Is there any specific reason this happens or a way I can prevent it? The above example is of a URL that fails to generate a PDF :
http://www.pcmag.com/encyclopedia_term/0,1237,t=access+point&i=37393,00.asp

I tested this in Acrobat X and the exact same issue occurs
http://www.quantumdynamix.net/clients/image-map-test/ImageMapTest-AcrobatX.pdf
This has to be considered a legatimate bug, especially since IMAGE MAPS is listes as one of the supported HTML features via the help files

Applet does not work with a proxy server.URgent

Hi,
I have an asp page being hosted from a IIS server.
The asp page has an applet which gets data from a server side component which is hosted as a service on the server side.For connection to the server I am using URLConnection object and trying to connect over a TCP connection.
The problem occurs when I use an proxy in the middle.
I have changed the browser settings to include the proxy.
The following is the error I recieve:
Full :http://172.25.11.63:4590/
<-------------------------------->
OPening input stream
in Run ::::
ERROR: Created data socket but can't open stream on
it.172.25.11.63:4590//
172.25.11.63:4590//
java.io.FileNotFoundException: 172.25.11.63:4590//
     at com/ms/net/wininet/http/HttpInputStream.connect
     at com/ms/net/wininet/http/HttpInputStream.<init>
     at com/ms/net/wininet/http/HttpURLConnection.createInputStream
     at com/ms/net/wininet/WininetURLConnection.getInputStream
     at TalkClientApplet.rendezvous
     at TalkClientApplet.actionPerformed1
     at TalkClientApplet.start
     at com/ms/applet/AppletPanel.securedCall0
     at com/ms/applet/AppletPanel.securedCall
     at com/ms/applet/AppletPanel.processSentEvent
     at com/ms/applet/AppletPanel.run
     at java/lang/Thread.run
...Disconnecting.
Following is my code.
url = new URL("http://" + host +":"+i);
urlconnection = url.openConnection();
urlconnection.setDoOutput(true);
urlconnection.setDoInput(true);
System.out.println("Successfully opened the URL connection at " + "http://" + host + ":" + i );
          System.out.println ("Protocol: " + url.getProtocol());
          System.out.println ("Host :" + url.getHost());
          System.out.println ("Port :" + url.getPort());
          System.out.println ("File :" + url.getFile() );
          System.out.println ("Full :" + url.toExternalForm());
          System.out.println ("<-------------------------------->");
os = new BufferedWriter(new OutputStreamWriter(urlconnection.getOutputStream()));
System.out.println("OPening input stream ");
// is = new DataInputStream(urlconnection.getInputStream());
     System.out.println(urlconnection.getInputStream());
is = new DataInputStream(urlconnection.getInputStream());
The exact place where I get the error is whn i call URLConnection.openInputStream().
Usually this error comes with a malformed URL.But the same code words without a proxy.Also I am not making any changes to my code in both scenarios that is with or without proxy.
Please help.This is urgent and a showstopper

Thanks for your nice solution, but unfortunatelly it does not work with lines longer than 100 chars with Netscape. It works fine with IE and appletviewer too.
Example:
I use this code:
try {
            URL url = new URL(protocol,hostName,portNumber,URLstring);
            InputStream in = url.openStream();
            BufferedInputStream bis = new BufferedInputStream(in);
            StringBuffer input = new StringBuffer(60);
            int c;
            while ((c = bis.read()) != -1){
                System.out.print((char)c);
                input.append((char)c);
            bis.close();
            dataFromServer = input.toString();
        catch(Exception ex) {
            ex.printStackTrace();
        }I use input file test.html with exactly 100 chars ('a')
Netscape Java Console:
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaadataFromServer : aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaI use input file test.html with exactly 101 chars ('a')
Netscape Java Console:
?JL?yyxk?cedataFromServer : ?

I m in from bangladesh 7days ago I bought an iphone 4 but not work with sim card. no service.

7days ago I bought an iphone4 from my friend Mithu who come from Singapore.
He told me he that after 7days he come dhaka and open my iphone by using sim. but 4days ago he died on road accident.
He didn't give me any documents & I also knocking his family for that but said they didn't know about iphone. but i cut a sim & insert it in my iphone but showing no service, some time no sim.
How can I work with my iphone,
plz plz plz advise me. I hv not enough money to buy another one,
Plz help me remembering steve jobs.
Version------- 4.2.1(8C148).
Carrier Lab 9.0
Model MC603B.
Serial---8602613MA4S

The iPhone 4 may not work with a cut down SIM. Get a microSIM from your carrier when you set up service.

Dear sir I bought my iPhone 4 from Apple store in Charlotte N/C about 2years ago without contract. Now I tried to upgrade it to iOS 7.0.4.but after that my phone not work with last sim card. And invalid sim appeared.so I bought it without contract but it

Dear sir
I bought my iPhone 4 from Apple store in Charlotte N/C about 2years ago without contract.
Now I tried to upgrade it to iOS 7.0.4.but after that my phone not work with last sim card.
And invalid sim appeared.so I bought it without contract but it seems to be lock in my country
Please tell me whats the matter?
My phone serial no 86034HTCA4T
Modem firmware 04.12.09
Thanks

Without contract is not the same as unlocked. The update to iOS 7 relocked
the iPhone to the wireless carrier to which it was originally locked. You must
contact that wireless carrier to see if they offer unlocking and if you qualify.
If you used jailbreak or other hack to unlock the iPhone initially, the method
used may prevent a legitimate unlock from succeeding and may render your
iPhone unuseable.

I bought this iPhone from Apple Retail Store for the full amount, but it does not work with my SIM card only works with AT&T

Hello,
I have an iPhone 4S 32Gb White AT&T, product part No. MC921LL/A, Serial No. C39GMLPWDTDC
I bought this iPhone from Apple Retail Store (from Fifth Avenue, NY) for the full amount. Now it does not work with my SIM card only works with AT&T. I restored the phone several times, but I have not received "Congratulations your iPhone has been unlocked". Please activate my iPhone to work with different SIM cards
Thanks,
Best Wishes

When did you buy it?
Apple did not begin selling an unlocked version of the iPhone 4S in the US until 11/11/11. I believe it went on sale only through the online store at that time. I'm not sure if it's available at retail yet.
What you purchased was a phone without a contract commitment. It is still locked to AT&T. AT&T will NOT unlock iPhones for any reason. Return it and get your money back, then use that to purchase an unlocked phone.

I had a repair done on my MacBook Pro and had to have a new hard drive installed. The Apple Auth Repair Shop then updated the OS from 10.6.8 to 10.7.5. Now my iPhoto v 9.2.3 will not open and it sounds like it will not work with this OS. Can you plea

I had a repair done on my MacBook Pro and had to have a new hard drive installed. The Apple Auth Repair Shop then updated the OS from 10.6.8 to 10.7.5. Now my iPhoto v 9.2.3 will not open and it sounds like it will not work with this OS. Can you please advise?

You may need many other updates to retain compatibility with Lion. I suggest you reinstall Snow Leopard. Unfortunately, you will need to erase the drive first. Be sure to backup your data if you haven't done so already.
Clean Install of Snow Leopard
Be sure to make a backup first because the following procedure will erase
the drive and everything on it.
     1. Boot the computer using the Snow Leopard Installer Disc or the Disc 1 that came
         with your computer. Insert the disc into the optical drive and restart the computer.
         After the chime press and hold down the "C" key. Release the key when you see
         a small spinning gear appear below the dark gray Apple logo.
     2. After the installer loads select your language and click on the Continue
         button. When the menu bar appears select Disk Utility from the Utilities menu.
         After DU loads select the hard drive entry from the left side list (mfgr.'s ID and drive
         size.) Click on the Partition tab in the DU main window. Set the number of
         partitions to one (1) from the Partitions drop down menu, click on Options button
         and select GUID, click on OK, then set the format type to MacOS Extended
         (Journaled, if supported), then click on the Apply button.
     3. When the formatting has completed quit DU and return to the installer. Proceed
         with the OS X installation and follow the directions included with the installer.
     4. When the installation has completed your computer will Restart into the Setup
         Assistant. After you finish Setup Assistant will complete the installation after which
         you will be running a fresh install of OS X. You can now begin the update process
         by opening Software Update and installing all recommended updates to bring your
         installation current.
Download and install Mac OS X 10.6.8 Update Combo v1.1.

Hello, I have iMac from Oct, 2010 and have OS 10.6.7 and multiple users. Mail icon was accidently removed along with program. Mail 4.4 is on other users but when I reloaded software my user got Mail 4.3. Mail 4.3 did not work with latest OS. Ideas?Matt

Hello, I have iMac Itel i3, from Oct, 2010 and have OS 10.6.7 and multiple users.
About 3-4 days ago the Mail icon in dock had question mark and was accidently removed, along with program on my user. Oops.
1. Mail 4.4 is on other users and works fine, but for me it does not work and tells me V4.3 does not work with latest OS X.
2. I reloaded software from my user with original disks (Oct, 2010) and got Mail 4.3 again. Mail 4.3 did not work with latest OS. I am unable to load Mail. Gives Yellow error message.
" You have Mail version 4.3 (1081/1084). It can’t be used on Mac OS X Version 10.6.7 (Build 10J869). For more information, click the Help button."
3. Tried to update software and look for update for mail 4.3 on Apple site to no success.
Hate to go to MS-Entorage ( I may need to learn something new and alien) mail program since contracts are in Mail/Address Book.
Ideas?
MattDeeds

Matt,
I would download and run the 10.6.7 combo update.
http://support.apple.com/kb/DL1361
Regards,
Captfred

You must have connected the Time Capsule with a router that does not work with my direct cable from my ISP

you must have connected the Time Capsule with a router that does not work with my direct cable from my ISP

I tried to answer in your other post.. please stick to one thread ..
What method of internet do you have.. is this fibre install.. if so the TC should just plug in and use dhcp in router mode.. press and hold the reset and it will go back to router mode by default.

Import via Drag & Drop not working with LR CC (after Update from 5.7)

I always imported my pictures by just dragging them in the Windows Explorer and dropping them to the Lightroom Gallery tab.
This does not work with LR CC anymore.
The longer way via "Import" works fine.
Any suggestions?

With Gallery i meant Library, my mistake (wrong translation, i am using the german version).
What works with your setup doesn't work with mine.
I attached a screenshot:
As you can see (cursor) i can't import the file from the file explorer on the right.
(The file is not already in the catalogue and i am in the library tab grid view mode).
Using Windows 7 x64 prof Service Pack 1

My macbook is back from repairs. It is not working with my apple led cinema display. It was working prior to the repairs on the laptop. Is there a setting I don't know about that might have been changed?

My macbook pro is just back from repairs. It is not working with my apple led cinema display. I have followed the directions in the cinema display manual. am I missing something?

Take a look at the Displays preference panel to see if everything is ok, particularly the resolution and refresh rate. Displays will probably try to put the panel for the ACD on the ACD where you won't see it. So click "Gather Windows" to get the ACD panel on to your macbook.
One more thing, make sure you fully seated the mini displayport plug. They can be sneaky little devils in that they need to be fully pushed in.

Conection from Solaris is not working with Proxy (RedHat Linux is)

Similar Messages

Maybe you are looking for