Directory server 6.2 for LDAP Naming on Solaris 9 SPARC

I'm in a POC at CU site and I'm trying to set up a Solaris 9 with a Directory Server 6.2 for Naming Services.
After installing the whole thing, I'm at the point of running idsconfig and I'm getting the following error
ERROR: idsconfig only works with iDS version 5.x, not 6.2.I've no evidence of the fact that my configuration is not supported. Does anyone knows if I'm missing some patches? A quick run on sunsolve does not shows any specific patch for the issue on Solaris 9 (does it exist for Solaris 10).
Thanks for helping.

This has been discussed before here: http://forum.java.sun.com/thread.jspa?threadID=5178211
There is a fairly recent patch for 10 that corrects the problem but the easiest thing to do is just edit the idsconfig file and change the variable for the major version from 5 to 6 and voila, you're good.

Similar Messages

Directory Server 5 SDK for C

Is anyone using the Directory Server 5 SDK for C?
I am looking for documentation on the product since Sun does not include this as part of the download and is not on the docs.sun.com site.
If you are successfully using this development environment, may I contact you directly to ask a few questions?

The LDAP C-SDK 6.0 will support these platforms.
It will be available along with Directory Server 6.0.

Setup Java system directory server 6 client for user authentication

I am trying to set up a native LDAP client for sun directory server 6 for network based user authentication. I checked the sun doc for naming service (LDAP) and the documentation are for setting up LDAP client for directory server 5. Is there any documentation for setting up LDAP client for directory server 6? Or the documents for setting LDAP client for directory server 5 is still good for 6? Particularly, I want to use SSL communication between server and client.

Hi,
could be one of the other 'bad jokes' of DS/ldapclient because the documentation describes a lot of stuff about profiles etc. but: you need some special schema files to use the whole stuff and they are not installed with Solaris or DS (and they include the NisDomainObject). I had to search for them in the internet. They are also printed in the documentation. Save them in your server's config/schema directory as i.e. 61DUAConfigProfile.ldif and 62nisDomain.ldif and try idsconf again (maybe you have to cleanup something).
I test and prepare DS6 here, and we will use it in production too. I hadn't any problem with it and it has some important advantages over DS5.2. But we won't have a huge directory so I can't tell you anything more about it.
Regards
Jochem Ippers
Here are the ldifs:
61DUAConfigProfile.ldif:
dn: cn=schema
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.0 NAME 'defaultServerList' DESC 'Default LDAP server host address used by a DUA' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.1 NAME 'defaultSearchBase' DESC 'Default LDAP base DN used by a DUA' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.2 NAME 'preferredServerList' DESC 'Preferred LDAP server host addresses to be used by a DUA' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.3 NAME 'searchTimeLimit' DESC 'Maximum time in seconds a DUA should allow for a search to complete' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.4 NAME 'bindTimeLimit' DESC 'Maximum time in seconds a DUA should allow for the bind operation to complete' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.5 NAME 'followReferrals' DESC 'Tells DUA if it should follow referrals returned by a DSA search result' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.6 NAME 'authenticationMethod' DESC 'A keystring which identifies the type of authentication method used to contact the DSA' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.7 NAME 'profileTTL' DESC 'Time to live, in seconds, before a client DUA should re-read this configuration profile' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.14 NAME 'serviceSearchDescriptor' DESC 'LDAP search descriptor list used by a DUA' EQUALITY caseExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.9 NAME 'attributeMap' DESC 'Attribute mappings used by a DUA' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.10 NAME 'credentialLevel' DESC 'Identifies type of credentials a DUA should use when binding to the LDAP server' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.11 NAME 'objectclassMap' DESC 'Objectclass mappings used by a DUA' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.12 NAME 'defaultSearchScope' DESC 'Default search scope used by a DUA' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.13 NAME 'serviceCredentialLevel' DESC 'Identifies type of credentials a DUA should use when binding to the LDAP server for a specific service' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.15 NAME 'serviceAuthenticationMethod' DESC 'Authentication method used by a service of the DUA' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'user defined' )
objectClasses: ( 1.3.6.1.4.1.11.1.3.1.2.4 NAME 'DUAConfigProfile' SUP top STRUCTURAL DESC 'Abstraction of a base configuration for a DUA' MUST ( cn ) MAY ( defaultServerList $ preferredServerList $ defaultSearchBase $ defaultSearchScope $ searchTimeLimit $ bindTimeLimit $ credentialLevel $ authenticationMethod $ followReferrals $ serviceSearchDescriptor $ serviceCredentialLevel $ serviceAuthenticationMethod $ objectclassMap $ attributeMap $ profileTTL ) X-ORIGIN 'user defined' )
62nisDomain.ldif:
dn: cn=schema
attributeTypes: ( 1.3.6.1.1.1.1.30 NAME 'nisDomain' DESC 'NIS domain' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'user defined' )
objectClasses: ( 1.3.6.1.1.1.2.15 NAME 'nisDomainObject' SUP top STRUCTURAL MUST nisDomain X-ORIGIN 'user defined' )

Directory Server recommendations (NIS to LDAP)

I'm starting out looking into migrating our NIS database to LDAP using Sun Directory Server.
We currently use NIS primarily for authentication and Unix account information.
I've installed Sun Java System Directory Server 5.2.4 on a Solaris 10 machine (is this different than iPlanet or whatever is installed by default -- idsconfig)?
I'm trying to figure out which is the best way to tackle the migration. I haven't yet stumbled across any tools for automatically importing NIS stuff into my LDAP directory yet, but I suppose some 3rd party scripts exists.
Beyond that, I see reference to a Gateway (rpc.nisd) that can be used to ferry NIS+ requests to an LDAP backend. See http://www.phptr.com/articles/article.asp?p=101621&seqNum=2&rl=1. My question is, does this work only with NIS+ or would it work with NIS as well?
Any other tips and/or best practices would be appreciated. There's a lot of documentation out there, but for various versions of the directory server with just enough differences to confuse me. :)
TIA.

I have done this migration a couple of times now and the best thing to do is just write a perl script to grab all of the nis data out of the mappings files and then have the script create a ldif file with all the correct attributes. The script is not that hard to create and once done you can just import all your users right into ldap via the ldif file.

Using iws4.1 and Directory Server 5.0 for authentication, is there a way to force a log off ?

Hi,
You can set this in "iPlanet Diretory Server", to force the user to log off after particular time. For more info. check iPlanet Directory server guide.
Regards,
Dakshin.

Unable to create the Directory Server entry on the LDAP Console

When I try to create the connection with the Directory Server I get the following message:
Could not contact the DSCC agent on <server>. Use the command cacaoadm to check that the DSCC agent is installed and running on port 11162.
I found a bug related to this issue and installed the patch 123893-15. I restarted the cacaoadm and the console:
root@mntsammx # cacaoadm list-params
snmp-adaptor-port=11161
snmp-adaptor-trap-port=11162
jmxmp-connector-port=11162
commandstream-adaptor-port=11163
rmi-registry-port=11164
secure-webserver-port=11165
java-flags=-Xms4M -Xmx128M -Dcom.sun.management.jmxremote -Dfile.encoding=utf-8 -Djava.endorsed.dirs=/usr/lib/cacao/lib/endorsed
micro-agent=false
java-home=/usr/jdk/jdk1.5.0_18
jdmk-home=/usr/share/lib/jdmk
nss-lib-home=/usr/lib/mps/secv1
nss-tools-home=/usr/sfw/bin
retries=4
log-file-limit=1000000
log-file-count=3
log-file-append=true
enable-instrumentation=false
user=root
group=sys
network-bind-address=127.0.0.1
watchdog-heartbeat-timeout=60
And as you can see it is running on that port. What else needs to be done ?
Thanks!

Well... this ALMOST worked. I got closer. I found out there are three cacaoadm deamons on the machine, so, I started the correct one at this time:
[server1]/opt/myuser> ps -ef | grep cacao
root 17773 1 0 Jun 12 ? 0:02 /usr/lib/cacao/lib/tools/launch -w /var/cacao/instances/default -L 16384 -P /va
myusermx 22756 20845 0 10:06:14 pts/4 0:00 grep cacao
So, I stopped the old one:
root@server1 # cd /usr/sbin
root@server1 # ./cacaoadm stop
root@server1 # ps -ef |grep cacao
root 23393 23045 0 10:16:20 pts/4 0:00 grep cacao
root@server1 #
Then I changed to the location of the correct one
cd /opt/myuser/sunoneldap/dsee6/cacao_2/usr/sbin/
[server1]/opt/myuser/sunoneldap/dsee6/cacao_2/usr/sbin> ./cacaoadm set-param network-bind-address=<my_ip>
[server1]/opt/myuser/sunoneldap/dsee6/cacao_2/usr/sbin> ./cacaoadm start
[server1]/opt/myuser/sunoneldap/dsee6/cacao_2/usr/sbin> ./cacaoadm status
default instance is DISABLED at system startup.
Current retries count : 0/4
Processes:
23755
Uptime: 0 day(s), 0:0
[server1]/opt/myuser/sunoneldap/dsee6/cacao_2/usr/sbin> ps -ef | grep cacao
myusermx 23753 1 0 10:17:53 ? 0:00 /opt/myuser/sunoneldap/dsee6/cacao_2/usr/lib/cacao/lib/tools/launch -w /opt/man
myusermx 23918 20845 0 10:18:22 pts/4 0:00 grep cacao
So, I went back to the console, at this time it let me thru the step to accept the certificate, I did click next and an exception was threw. I copied it, but I lost it. After that, I wasn't able to get to the same point again, I am back to the old message that it can't contact the cacaoadm....
Any other inputs?

Directory Server crashing 5. SP 1 on Solaris 9

Hi,
I have two problems at the moment. My first one is my directory server is crashing in a fairly regular basis. Basically the process just disappears at random intervals. It is 5.1 SP1 running on Solaris 9 on a Sunfire 280R.
OS = Solaris 9 s9_58shwpl3 SPARC
Copyright 2002 Sun Microsystems, Inc. All Rights Reserved.
Use is subject to license terms.
Assembled 15 April 2002
Solaris 9 Maintenance Update 2 applied
Kernel is 112233-03.
I have quite a few other boxen running Solris 9 on ultrasparc 2 hardware with no problems.
Any ideas?
My second problem is that I am trying to replicate via a multi master configuration to another instance running on an E250. Same spec OS and patches.
When I initialise the E250 it seems to go through, OK but some data is missing and I am seeing log entries like this on the 280R.
[28/Feb/2003:15:07:30 +1300] NSMMReplicationPlugin - IsValidOperation: NULL entry uniqueid
[28/Feb/2003:15:07:30 +1300] NSMMReplicationPlugin - IsValidOperation: NULL entry uniqueid
[28/Feb/2003:15:07:48 +1300] NSMMReplicationPlugin - IsValidOperation: NULL entry uniqueid
[28/Feb/2003:15:18:54 +1300] NSMMReplicationPlugin - IsValidOperation: NULL entry uniqueid
[28/Feb/2003:15:19:51 +1300] NSMMReplicationPlugin - IsValidOperation: NULL entry uniqueid
[28/Feb/2003:15:20:41 +1300] NSMMReplicationPlugin - IsValidOperation: NULL entry uniqueid
[28/Feb/2003:15:20:41 +1300] NSMMReplicationPlugin - IsValidOperation: NULL entry uniqueid
[28/Feb/2003:15:21:19 +1300] NSMMReplicationPlugin - IsValidOperation: NULL entry uniqueid
[28/Feb/2003:15:21:20 +1300] NSMMReplicationPlugin - IsValidOperation: NULL entry uniqueid
[28/Feb/2003:15:22:45 +1300] NSMMReplicationPlugin - IsValidOperation: NULL entry uniqueid
[28/Feb/2003:15:22:45 +1300] NSMMReplicationPlugin - IsValidOperation: NULL entry uniqueid
I have no idea what these mean but it looks to me like there is a problem with some entries that it is trying to replicate and this is hindering it. So my second directory is missing some entries that the primary directory has.
Any ideas on either of these things?
Should I upgrade to 5.1 SP2 which I believe is out now?

By the way. That is 5.1 SP 1 not 5. doh.

Where can i download netscape directory server 4.11 for solaris 2.6

i cannot find it is www.iplanet.com.
Thanks!!

Why you want to have NDS 4.11? Any version of the NDS 4.1x will support Solaris 2.6 and 8. This version is nolonger available in iplanet's site. I suggest you to get NDS 4.13 or later version. At iplanet's web site, you will find the latest version, 4.16. Also, you will find 4.13 from Solaris 8's CD ording from Sun's reseller.
Lucas

JNDI Tutorial Sun and IBM Directory server v5.1

Hi there guys,
I'm new with JNDI and LDAP but I trying to get the tutorial started with the IBM Directory server v5.1 but with no luck. The tutorial mentions something about root naming contexts. As far as I can find in the docs of the IBM directory server there are no root naming contexts. Am I right? Further when I added the several DN's under the suffixes and I try to restart the server, the server won't start anymore. What I did was adding the following lines as suffixes:
o=JNDITutorial
ou=Groups, o=JNDITutorial
cn=Directory Administrators, ou=Groups, o=JNDITutorial
etc..
Is there someone who had the same problems?
Or are there any suggestions for using another (free) LDAP server?
Hope someone can help.

in suffixes you can only add 'o's ..not ous, cns etc.
For that run a ldif for that o, as an admin to add a tree.
hope this helps.

Sun Java Directory Server 5.2 x86 download

I'm trying to find a copy of the x86 version of the Sun Java Directory Server compressed archive for Solaris. I'm trying to build out a test system for some old software, and I only have a copy of the Sparc version of ldap. I've tried using the current DSEE version available on the Oracle e-delivery cloud, but the software is too old to work with it...it needs the 5.2 version, specifically. Is anyone aware of where I can find a copy?
Thanks for any assistance.

Nope
This is part of the Oracle Lifetime Support policy:
http://www.oracle.com/us/support/lifetime-support/index.html
'OLD' products can/may still be supported under *SPECIAL* support contracts. So if you're entitled to its support, you can access it. Otherwise, I'm afraid the answer is no.
HTH,
Marco

How to create users with i18n characters in SunONE directory server?

Was trying to create users and groups with i18n characters in SunONE directory server
1. Started LDAP console using -l option
2. Chaged the Locale to Japanese
3. Entered few japanese character as username (meaning internationalization user name)
4. However, I could not able to type the password using the "soft keyboard" that comes with Japanese Locale
5. to overcome with #4, for now, I typed english chars as the password
6. Click OK to save the above username/pwd
7. It says "netscape.ldap.LDAPException: error result (19); value of attribute "uid" contains extended (8-bit) characters"
Has anyone ever created i18n user names in SunONE Directory Provider? Please help...

Hi LostLad,
Soryy for my ignorance...Could you please be elaborate on how to remove "uid attribute from 7-bit ASCII plugin?
Thanks in advance..

How do I implement Directory server 5.1? Install it and then buy licences later?

I am new to Directory Server 5.1 and need to install it as a pre-req to a 3rd party product.
Is the server freeware? If not how much does it cost do I have to buy licences separately once I download the server?

I believe, you can download develop and test on iPlanet Directory Server 5.1 for free. When you deploy in commercial production environment, you will need licenses. The licenses are per LDAP entry. So if you use more entries you pay more.

Directory Server and Samba 3 PDC

I'm trying to connect to directory server from samba 3
# ./smbpasswd -w secret
# ./net getlocalsid
it says:
bash-3.00# ./net getlocalsid
[2006/04/29 13:29:10, 0] lib/smbldap.c:smbldap_connect_system(890)
failed to bind to server ldap://merlin.cotarh.local with dn="cn=admin,dc=cotarh,dc=local" Error: Inappropriate authentication
[2006/04/29 13:29:25, 0] lib/smbldap.c:smbldap_search_suffix(1346)
smbldap_search_suffix: Problem during the LDAP search: (unknown) (Timelimit exceeded)
SID for domain MERLIN is: S-1-5-21-3865381809-2382358429-1619658665
What's wrong?

Once the user has authenticated with Kerberos, the token can be used with LDAP using the SASL authentication with GSSAPI / Kerbv5 mechanism.
How to configure Directory Server 5.2 for this is fully documented in the Chapter 11 - Managing Authentication and Encryption of the Administration Manual.
<http://docs.sun.com/source/817-5221/ssl.html#wp20166>
Regards,
Ludovic.

Sun Directory Server Installation

Hi all,
I am a student in a Computer Science degree and as my project i am designing a web application that allows users to exchange ideas through a "messaging" system.
After discussion with my tutors we have come up with a design idea that we would use an LDAP server to authenticate users as well as keep message details such as Topic, message header, etc. The actual body of the msg should be kept in a separate database.
To the point....
It has been suggested that i use the Sun Java System Directory Server 5.2 for this project and i was also given a compressed installation package. I have tried to install this and received error msgs similar to the ones i have found others have had in this forum.
For example topics:
1. Forums - Directory Server configuration issues in Windows
2. Forums - Install failed on Windows XP
I am using windows XP and from what i have read although it is not supported some people have managed to get this to work. Also i read that maybe Studio enterprise might solve this issue or provide some support?
Is this true and if so can someone give me some guidance on how to achieve this?
Also i would appreciate your opinion on wether this design approach( LDAP for authentication and database for store) is feasible or technicaly "correct" and maybe suggestions to a different approach....

I think that its never a bad idea to get acquainted with something like the Sun Directory Server although I'm not sure that means that one HAS to use it in a project.
The DS can be a pain to get up but for the most part if you get the latest DS5.2 Q4 or something...most installations go smoothly. If it was me I would just chuck every thing about the convo into the directory but I'm sure that there's a reason that you want to use the DS in conjuction with other storage DBs.
I don't think you need to get Studio enterprise. I was able to get it up and running all by itself on windows. After I installed it I jsut made sure to remember the two random ports it picks up for Admin and DS ldap usage. Also I changed the password expiry time of the account that is used by the Admin console.
GLuck with this.
Cheers,
- Pulkit

Open directory server crashing every 30 days / clients unable to connect to calendar, contacts server

Hello everyone,
I am running an up to date Mavericks Server which serves exclusively as a calendar and contacts server for about two dozens devices. The server is reachable via DynDNS, however, the public IP hardly ever changes (only once or twice a year maybe). Tried setting the OS X DNS Server to serve "all clients" and "some clients".
For about 6 months (i.e. also under Mountain Lion), I am having a very strange problem. Roughly every 20-30 days, clients will not be able to connect to the server, instead getting a "wrong password" dialog. Restarting the open directory server will help for the next 30 days.
I have tried repairing the database as detailed here, however, the issue persists.
Any help would be highly appreciated!
I would have tried setting up a clean server installation, migrating calendars/contacts manually and re-adding all users by hand, however, I am not aware of an easy way to do so. The terminal command for calendar backup is broken under mavericks (might work with this workaround) and re-adding users manually would apparently involve correcting user UUIDs afterwards in order to match the migrated calendar data. Do you know of a better approach?
Thanks a lot!
DPSG-Scout

Hi Linc,
This looks the most relevant to me:
opendirectory.log
2014-03-11 11:13:09.460675 CET - 333.2628758.2628759 - Client: Python, UID: 93, EUID: 93, GID: 93, EGID: 93
2014-03-11 11:13:09.460675 CET - 333.2628758.2628759, Node: /Local/Default, Module: PlistFile - predicates with 'AND' are not supported
2014-03-11 12:09:00.296514 CET - State information (some requests have been active for extended period):
          Sessions: {
              28 -- opendirectoryd:
                          Session ID: 7BFBA6FE-A968-4399-A129-E3A5945E2A81
                          Refs: singleton
                          Type: Default
                          Target: localhost
          Nodes: {
              43 -- authd:
                          Node ID: 6D0E236D-6DBD-4E8C-BC01-B3F50C2C2D8E
                          Nodename: /LDAPv3/127.0.0.1
                          Session ID: <Default>
                          Refs: 1
                          Internal Use: X
an many more similar ones…
Thanks for your effort!

Directory server 6.2 for LDAP Naming on Solaris 9 SPARC

Similar Messages

Maybe you are looking for