Directory Server & Calendar: permission problems

When users of the Calendar server subscribe to calendars, they get no errors but the Calendar is not added to the list.
In the LDAP logs I found an error about updating the user's profile:
[08/Nov/2004:11:36:02 +0100] conn=1406 op=35 msgId=36 - SRCH base="o=domain.com" scope=2 filter="(uid=USERID)" attrs=ALL
[08/Nov/2004:11:36:02 +0100] conn=1406 op=35 msgId=36 - RESULT err=0 tag=101 nentries=1 etime=0
[08/Nov/2004:11:36:02 +0100] conn=17255 op=3 msgId=4 - BIND dn="uid=USERID,ou=People,o=domain.com" method=128 version=3
[08/Nov/2004:11:36:02 +0100] conn=17255 op=3 msgId=4 - RESULT err=0 tag=97 nentries=0 etime=0 dn="uid=USERID,ou=people,o=domain.com"
[08/Nov/2004:11:36:02 +0100] conn=24 op=95 msgId=96 - SRCH base="o=domain.com" scope=2 filter="(uid=USERID)" attrs="cn mail preferredlanguage icscalendar icstimezone icsdefaultset icsfirstday icsset icssubscribed icsfreebusy icsallowedserviceaccess icsstatus inetuserstatus inetresourcestatus givenname sn uid"
[08/Nov/2004:11:36:02 +0100] conn=24 op=95 msgId=96 - RESULT err=0 tag=101 nentries=1 etime=0
[08/Nov/2004:11:36:02 +0100] conn=24 op=96 msgId=97 - SRCH base="o=domain.com" scope=2 filter="(uid=USERID)" attrs="cn cn;lang-en givenname givenname;lang-en mail preferredlanguage sn sn;lang-en icscalendar icstimezone icsdefaultset icsfirstday icsset icssubscribed icsfreebusy icsextendeduserprefs nswcalcalid icsdwphost icscalendarowned"
[08/Nov/2004:11:36:02 +0100] conn=24 op=96 msgId=97 - RESULT err=0 tag=101 nentries=1 etime=0
[08/Nov/2004:11:36:13 +0100] conn=24 op=97 msgId=98 - SRCH base="o=domain.com" scope=2 filter="(&(icscalendarowned=*USERID2*)(objectclass=icsCalendarUser))" attrs="icscalendarowned"
[08/Nov/2004:11:36:14 +0100] conn=24 op=97 msgId=98 - RESULT err=0 tag=101 nentries=1 etime=1
[08/Nov/2004:11:36:14 +0100] conn=24 op=98 msgId=99 - SRCH base="o=domain.com" scope=2 filter="(uid=USERID)" attrs="cn mail preferredlanguage icscalendar icstimezone icsdefaultset icsfirstday icsset icssubscribed icsfreebusy icsallowedserviceaccess icsstatus inetuserstatus inetresourcestatus givenname sn uid"
[08/Nov/2004:11:36:14 +0100] conn=24 op=98 msgId=99 - RESULT err=0 tag=101 nentries=1 etime=0
[08/Nov/2004:11:36:14 +0100] conn=24 op=99 msgId=100 - SRCH base="o=domain.com" scope=2 filter="(uid=USERID)" attrs="cn cn;lang-en givenname givenname;lang-en mail preferredlanguage sn sn;lang-en icscalendar icstimezone icsdefaultset icsfirstday icsset icssubscribed icsfreebusy icsextendeduserprefs nswcalcalid icsdwphost icscalendarowned"
[08/Nov/2004:11:36:14 +0100] conn=24 op=99 msgId=100 - RESULT err=0 tag=101 nentries=1 etime=0
[08/Nov/2004:11:36:17 +0100] conn=24 op=100 msgId=101 - SRCH base="o=domain.com" scope=2 filter="(&(icscalendarowned=*USERID2*)(objectclass=icsCalendarUser))" attrs="icscalendarowned"
[08/Nov/2004:11:36:17 +0100] conn=24 op=100 msgId=101 - RESULT err=0 tag=101 nentries=1 etime=0
[08/Nov/2004:11:36:17 +0100] conn=24 op=101 msgId=102 - SRCH base="o=domain.com" scope=2 filter="(uid=USERID)" attrs="cn mail preferredlanguage icscalendar icstimezone icsdefaultset icsfirstday icsset icssubscribed icsfreebusy icsallowedserviceaccess icsstatus inetuserstatus inetresourcestatus givenname sn uid"
[08/Nov/2004:11:36:17 +0100] conn=24 op=101 msgId=102 - RESULT err=0 tag=101 nentries=1 etime=0
[08/Nov/2004:11:36:18 +0100] conn=24 op=102 msgId=103 - SRCH base="o=domain.com" scope=2 filter="(uid=USERID)" attrs="cn cn;lang-en givenname givenname;lang-en mail preferredlanguage sn sn;lang-en icscalendar icstimezone icsdefaultset icsfirstday icsset icssubscribed icsfreebusy icsextendeduserprefs nswcalcalid icsdwphost icscalendarowned"
[08/Nov/2004:11:36:18 +0100] conn=24 op=102 msgId=103 - RESULT err=0 tag=101 nentries=1 etime=0
[08/Nov/2004:11:36:19 +0100] conn=24 op=103 msgId=104 - SRCH base="o=domain.com" scope=2 filter="(uid=USERID)" attrs="cn cn;lang-en givenname givenname;lang-en mail preferredlanguage sn sn;lang-en icscalendar icstimezone icsdefaultset icsfirstday icsset icssubscribed icsfreebusy icsextendeduserprefs nswcalcalid icsdwphost icscalendarowned"
[08/Nov/2004:11:36:19 +0100] conn=24 op=103 msgId=104 - RESULT err=0 tag=101 nentries=1 etime=0
[08/Nov/2004:11:36:19 +0100] conn=24 op=104 msgId=105 - SRCH base="o=domain.com" scope=2 filter="(uid=USERID)" attrs=ALL
[08/Nov/2004:11:36:19 +0100] conn=24 op=104 msgId=105 - RESULT err=0 tag=101 nentries=1 etime=0
[08/Nov/2004:11:36:19 +0100] conn=24 op=105 msgId=106 - MOD dn="uid=USERID,ou=People,o=domain.com"
[08/Nov/2004:11:36:19 +0100] conn=24 op=105 msgId=106 - RESULT err=50 tag=103 nentries=0 etime=0
[08/Nov/2004:11:36:19 +0100] conn=24 op=106 msgId=107 - SRCH base="o=domain.com" scope=2 filter="(uid=USERID)" attrs="objectclass"
[08/Nov/2004:11:36:19 +0100] conn=24 op=106 msgId=107 - RESULT err=0 tag=101 nentries=1 etime=0
[08/Nov/2004:11:36:19 +0100] conn=24 op=107 msgId=108 - MOD dn="uid=USERID,ou=People,o=domain.com"
[08/Nov/2004:11:36:19 +0100] conn=24 op=107 msgId=108 - RESULT err=50 tag=103 nentries=0 etime=0
[08/Nov/2004:11:36:19 +0100] conn=24 op=108 msgId=109 - SRCH base="o=domain.com" scope=2 filter="(uid=USERID)" attrs="cn mail preferredlanguage icscalendar icstimezone icsdefaultset icsfirstday icsset icssubscribed icsfreebusy icsallowedserviceaccess icsstatus inetuserstatus inetresourcestatus givenname sn uid"
[08/Nov/2004:11:36:19 +0100] conn=24 op=108 msgId=109 - RESULT err=0 tag=101 nentries=1 etime=0
[08/Nov/2004:11:36:19 +0100] conn=24 op=109 msgId=110 - SRCH base="o=domain.com" scope=2 filter="(uid=USERID)" attrs="cn cn;lang-en givenname givenname;lang-en mail preferredlanguage sn sn;lang-en icscalendar icstimezone icsdefaultset icsfirstday icsset icssubscribed icsfreebusy icsextendeduserprefs nswcalcalid icsdwphost icscalendarowned"
[08/Nov/2004:11:36:19 +0100] conn=24 op=109 msgId=110 - RESULT err=0 tag=101 nentries=1 etime=0
I'm not sure if this is since an upgrade, or if permissions were changed (by a predecessor).
Versions:
Sun-One Directory 5.2
Sun-One Calendar Express 5.1.1

Hi,
Based on my research, when if the organizer or the attendee adds notes to an occurrence, Outlook creates a meeting exception. Later, if the meeting series is updated and a full update is sent, any notes in the
meeting exceptions will be lost.
For more information about it, please refer to Recurring meetings in:
http://blogs.technet.com/b/outlooking/archive/2013/04/16/meeting-notes-in-outlook.aspx
Thanks,
Winnie Liang
TechNet Community Support

Similar Messages

  • Sun Directory Server Password Policy Problems

    Hi,
    I am using Sun Directory Server and Sun AM (2005Q1).
    We are using SUN DS to configure the password policy to expire user passwords after 30 days.
    Also, the warning has been set to "one day before expiry". However, when the warning IS displayed to the user and the user changes his/her password on display of the warning, even though the user's password expiration timestamp attribute contains a new timestamp (which is 30 days hence the date of change), on next login user is AGAIN thrown the warning that his/her password will expire in "HH hours: MM mins".
    I do not understand what needs to be done to fix this. Any help would be appreciated.

    How is the user authenticated ? Through Access Manager or directly to the Directory Server ?
    Access Manager can be configured to handle Password expiration, and so can Directory Server. I would advise you to check which system is actually throwing the warning.
    Regards,
    Ludovic

  • Shared calendar permission problems

    I am setting up a shared calendar for our office for our on-call schedule.  I need people to be able to add information to the calendar but not be able to delete anyone else's entries.  I have the settings set to "Author". 
    I have a recurring event set every day for our after-hours on-call schedule.  People enter their names in the notes section of the event next to blocks that I have created to designate that they will be the person on call that evening.  The event
    doesn't get deleted but the names that have been entered have disappeared twice! 
    The notes section looks like this:
    Duty:
    Alternate #1:
    Alternate #2:
    Alternate #3: 
    The form is always there but the names that were entered disappear. 

    Hi,
    Based on my research, when if the organizer or the attendee adds notes to an occurrence, Outlook creates a meeting exception. Later, if the meeting series is updated and a full update is sent, any notes in the
    meeting exceptions will be lost.
    For more information about it, please refer to Recurring meetings in:
    http://blogs.technet.com/b/outlooking/archive/2013/04/16/meeting-notes-in-outlook.aspx
    Thanks,
    Winnie Liang
    TechNet Community Support

  • Directory Server (partially installed) on ips60

    Hi I have followed the instruction "Configuring an Existing Remote Sun ONE Directory Server for Use With Sun ONE Portal Server" from "Sun ONE Portal Server Release Notes � March 2003" to install an exteral ids.
    I have done the patch by copying the cos-plugin.so to the appropriate directory from INSTALL_HOME/portal/ds_patch/113177-01/SUNWamds/root/var/opt/SU
    NWps/tmp/113177-01/.
    After restaring the directory server, I run the ./pssetup during the installation a message appearing as:
    Detected components:
    Directory Server (partially installed)
    Problems may result if partially installed components are used!
    Remove options:
    1) Remove Directory Server only
    2) Continue with install
    3) Exit
    Choice? [3]
    Is it supposed to show like this? And we ignore the problem and continue with Choice No.2?
    I am currently testing Portal to sit on iAS7 and also installed an external ids51p1. All on the same machine.
    Please advice

    Roger,
    I have confirmed that they have been combined into one package.
    The question now is how can I trick Directory Server 5.2 into thinking they have been installed?
    Thanks!
    Joshua Preston.
    Have you checked the Solaris 10 companion CDs? I
    looked at my JES2005Q1 distro and you're right, those
    packages are there for Sol 8 and 9, but not for 10.
    I checked a couple of our Sol10 machines and neither
    r had them.
    If they're not on the companion CDs, I'd open a case
    with tech support. This is a pretty serious
    oversight.
    HTH,
    Roger S.

  • Directory Server & NDA: modifications or permission problem?

    My predecessor replaced the "change password" page in the IDA. The original page is still at the original location, so I wonder if it was changed in a servlet or config-file (searched, but didn't find it).
    Accessing the original page (/nda/change.htm) doesn't work . I'm not sure if it's because I access it without logging in on the "normal" login page(but I have to enter my login info to change the password), or if it's because of permissions in ldap (to change your own password), but I didn't find such restrictions.
    Versions:
    Sun-One Directory Server 5.2
    iPlanet Messaging Server 5.2
    iDA Version (in setup.inf): 1.2P1

    Hi Gary,
    I believe this is a known issue when starting Directory Server after a reboot as the check of PID does not verify that the process is in fact ns-slapd.
    The work-around is to delete the pid file. And then restart the server.
    regards,
    Ludovic.

  • Open directory server crashing every 30 days / clients unable to connect to calendar, contacts server

    Hello everyone,
    I am running an up to date Mavericks Server which serves exclusively as a calendar and contacts server for about two dozens devices. The server is reachable via DynDNS, however, the public IP hardly ever changes (only once or twice a year maybe). Tried setting the OS X DNS Server to serve "all clients" and "some clients".
    For about 6 months (i.e. also under Mountain Lion), I am having a very strange problem. Roughly every 20-30 days, clients will not be able to connect to the server, instead getting a "wrong password" dialog. Restarting the open directory server will help for the next 30 days.
    I have tried repairing the database as detailed here, however, the issue persists.
    Any help would be highly appreciated!
    I would have tried setting up a clean server installation, migrating calendars/contacts manually and re-adding all users by hand, however, I am not aware of an easy way to do so. The terminal command for calendar backup is broken under mavericks (might work with this workaround) and re-adding users manually would apparently involve correcting user UUIDs afterwards in order to match the migrated calendar data. Do you know of a better approach?
    Thanks a lot!
    DPSG-Scout

    Hi Linc,
    This looks the most relevant to me:
    opendirectory.log
    2014-03-11 11:13:09.460675 CET - 333.2628758.2628759 - Client: Python, UID: 93, EUID: 93, GID: 93, EGID: 93
    2014-03-11 11:13:09.460675 CET - 333.2628758.2628759, Node: /Local/Default, Module: PlistFile - predicates with 'AND' are not supported
    2014-03-11 12:09:00.296514 CET - State information (some requests have been active for extended period):
              Sessions: {
                  28 -- opendirectoryd:
                              Session ID: 7BFBA6FE-A968-4399-A129-E3A5945E2A81
                              Refs: singleton
                              Type: Default
                              Target: localhost
              Nodes: {
                  43 -- authd:
                              Node ID: 6D0E236D-6DBD-4E8C-BC01-B3F50C2C2D8E
                              Nodename: /LDAPv3/127.0.0.1
                              Session ID: <Default>
                              Refs: 1
                              Internal Use: X
    an many more similar ones…
    Thanks for your effort!

  • Problems registering an existing Directory Server. Only given sudo access

    Hellos.
    I can install and start/stop my 11g Directory from command line with /opt/sfw/bin/sudo dsadm or dsconf commands.
    The directory uses port 389 so I need to have it running as "root" I ran the dsadm command with sudo.
    My problem is that when I use the https://localhost:8181/dscc7 web page to register the Directory I eventually get prompted for a Solaris account/password.
    I don't know (and I hope I never do know) the password to root.
    How do I proceed?
    The dialog did say that I can have a Solaris account which can administer this Directory instance but how is it done when I use port 389 ???
    HELP!!!

    If you're running on Solaris 10, then the most obvious things is to add the relative permission to the user that will run the Directory Server, for example:
    # usermod -K defaultpriv=basic,net_privaddr <USER>
    HTH,
    marco

  • "Operation Failed. The resource is not a directory, or there might be a permission problem"

    I am trying to edit a role setting but when i click on "Edit
    Role Settings" it pops up a message:
    "Operation Failed. The resource is not a directory, or there
    might be a permission problem"
    As suggested in a previous thread, I ran FTPServerChecker and
    only received two errors. Neither of them applied to me as I am
    using contribute 3 and one error was for contribute 2. The other
    said to ignore the error if you are using a windows server, which I
    am. What can I do to get this working? Thanks. Here is the log from
    FTPServerChecker if that helps:
    NOTE: "Serv-U FTP server" has been detected.
    There is a known issue reported with Contribute 2.0 and
    Serv-U server.
    If you are using Contribute 2.0, please download a patch from
    here
    http://www.macromedia.com/support/contribute/ts/documents/servu.htm
    Login: SUCCESS!
    Directory Listing Test: SUCCESS!
    Make Directory Test: SUCCESS!
    Change Directory Test: SUCCESS!
    Upload a File Test: SUCCESS!
    Fallback Test for Optimization: SUCCESS!
    Server State Test: SUCCESS!
    File/Directory NameExists Test: SUCCESS!
    File/Directory NOT Exists Test: SUCCESS!
    TimeStamp Test: SUCCESS!
    Rename Test: SUCCESS!
    Move File To Sub Dir Test: SUCCESS!
    Move File To Parent Dir Test: SUCCESS!
    Change Permission test: Error.
    If your FTP server runs on windows operating system, you may
    ignore this error.
    If your FTP server runs on UNIX based operating system,
    please check file/directory
    permissions.
    If you are using an anonymous or guest account, you might not
    have privileges to
    change permissions. Please check with your server
    administrator.
    -------------------------------- FTP log from the last
    operation -------------------------------
    > CWD /c:/websites/aaa/mm_diagnose
    < 250 Directory changed to /c:/websites/aaa/mm_diagnose
    > SITE CHMOD 755 rename_test3_parent_.mm
    < 501 SITE option not supported.
    > CWD
    /c:/websites/aaa/mm_diagnose/rename_test3_parent_.mm
    < 550
    /c:/websites/aaa/mm_diagnose/rename_test3_parent_.mm: No such file
    or directory.
    > CWD /c:/websites/aaa/mm_diagnose
    < 250 Directory changed to /c:/websites/aaa/mm_diagnose
    > RNFR rename_test3_parent_.mm
    < 350 File or directory exists, ready for destination
    name
    > ABOR
    < 226 ABOR command successful.
    Cleaning Test File: SUCCESS!
    Cleaning Test Directory: SUCCESS!
    Cleaning Test Directory: SUCCESS!

    Ken Jacobs wrote:
    > One of our clients is receiving this error message when
    using Contribute 3 to
    > publish any page on their website.
    >
    > I followed the instructions in the support center to
    enable logging. When I
    > looked at the log I noticed that there was an
    ACCESS_DENIED message when trying
    > to retrieve the file /www/home/news.html.LCK
    >
    > I checked the FTP server and I cannot find any trace of
    the lock file that is
    > mentioned in the error message.
    >
    > What is causing this message?
    >
    Not sure why this is happening... Try to create a copy of
    this page and
    try using it as a work around until then. Further more, look
    at the
    access privileges for the folder on your site.. you should
    have proper
    privileges..

  • Problem with a Stuck ML Calendar Client using Server Calendar

    I set up group Wikis on our server, which seem to work fine (as long as everyone remembers to log in with "https:" not "http:".
    On my ML client however, after cleaning out old Calendar accounts with the server, using System Preferences to create a Calendar account with the server, and then reopening Calendar, I can see the Server as a calendar source on the left pane but always get a message that says:
    "The URL https://<server URL>/principals/__uids__/0D06B83A-D825-4318-816C-097904CB4886/ encountered HTTP error 404. Make sure the URL is correct."
    I suspect that the hex code for my user ID is wrong (or maybe it is a group ID). But I can't seem to fix this. There is no place in the application to edit this URL. I can delete the server account from Calendar and try to start again and I still get the same message.
    Is there a configuration file where I can kill this and start over? I suspect some of my other clients to the server will also have this problem as I migrate them over.
    Thanks!

    I am still trying to debug this problem.
    I have tried removing the Server account from Calendar Preferences as well as System Preferences, then readding. Did not work.
    I tried doing the remove again, this time removing everything in Keychain associated with the Server Calendars. Did not work.
    I tried going to ../<User>/Library/Calendars and navigating to the caldav directory associated with the server (this takes some poking around as the directory name is based on the server's hex identifier), then renaming the Info.plist file, then deleting the account from System Preferences, then recreating. Did not work. In fact the renamed Info.plist file was gone, but a new one was there.
    The Info.plist file contained the bad entry in several places. This is what mine looks like (with specific servers and user names replaced):
    <?xml version="1.0" encoding="UTF-8"?>
    <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
    <plist version="1.0">
    <dict>
            <key>AccountIsEnabled</key>
            <true/>
            <key>AutoDiscovery</key>
            <false/>
            <key>AutoScheduleSupport</key>
            <true/>
            <key>CalendarHomePath</key>
            <string>/calendars/__uids__/0D06B83A-D825-4318-816C-097904CB4886/</string>
            <key>CalendarProxySupport</key>
            <true/>
            <key>CalendarServerPrivateEventsSupport</key>
            <true/>
            <key>CalendarUserAddresses</key>
            <array>
                    <string>urn:uuid:0D06B83A-D825-4318-816C-097904CB4886</string>
                    <string>/principals/users/<user short name>/</string>
                    <string>mailto:<user mailing address></string>
                    <string>/principals/users/<another short name>/</string>
                    <string>/principals/users/<another short name>/</string>
                    <string>/principals/__uids__/0D06B83A-D825-4318-816C-097904CB4886/</string>
            </array>
            <key>Color</key>
            <string>#808080FF</string>
            <key>Delegate</key>
            <false/>
            <key>DropBoxPath</key>
            <string>/calendars/__uids__/0D06B83A-D825-4318-816C-097904CB4886/dropbox/</stri ng>
            <key>Enabled</key>
            <true/>
            <key>ExpandPropertyReportSupport</key>
            <true/>
            <key>Expanded</key>
            <true/>
            <key>FullName</key>
            <string><User Full Name></string>
            <key>InboxAvailabilitySupport</key>
            <true/>
            <key>InboxPath</key>
            <string>/calendars/__uids__/0D06B83A-D825-4318-816C-097904CB4886/inbox/</string >
            <key>KeepOffline</key>
            <false/>
            <key>Kerberos</key>
            <false/>
            <key>Key</key>
            <string>0F753F73-160F-4836-91F3-8B0A54F10B85</string>
            <key>Login</key>
            <string><user short name></string>
            <key>ManagedAttachmentSupported</key>
            <false/>
            <key>NotificationCollectionPath</key>
            <string>/calendars/__uids__/0D06B83A-D825-4318-816C-097904CB4886/notification/< /string>
            <key>Order</key>
            <integer>39</integer>
            <key>OutboxPath</key>
            <string>/calendars/__uids__/0D06B83A-D825-4318-816C-097904CB4886/outbox/</strin g>
            <key>PrincipalURL</key>
            <string>https://<server URL>:8443/principals/__uids__/0D06B83A-D825-4318-816C-097904CB4886/</string>
            <key>PrivateCommentsSupport</key>
            <true/>
            <key>PushDisabled</key>
            <false/>
            <key>RefreshDate</key>
            <date>2012-12-02T19:44:22Z</date>
            <key>RefreshInterval</key>
            <integer>900</integer>
            <key>RequestCompressionSupported</key>
            <false/>
            <key>ShareDefaultAlarmSettings</key>
    <true/>
            <key>SupportsDefaultAlarms</key>
            <true/>
            <key>SupportsSharing</key>
            <true/>
            <key>SupportsSubscriptionCalendars</key>
            <false/>
            <key>Title</key>
            <string><server name></string>
            <key>Type</key>
            <string>CalDAV</string>
            <key>Writable</key>
            <true/>
            <key>isInSeparateWindow</key>
            <false/>
            <key>isManuallyConfigured</key>
            <false/>
    </dict>
    </plist>
    This tells me that my client is pulling this information down from the server. Annoying. Where is the configuration file on Mountain Lion Server? Why does it use the Hex address??? Short name would be infinitely better!

  • Directory Server 5.2 installation problem on win2000 server,sp4

    Hi,
    I attempt to install Directory Server 5.2 on windows 2000 server(Simple Chinese) sp4, when the installation comes to "configuring" it stops.
    And have this error:
    java.lang.StringIndexOutOfBoundsException: String index out of range: 16
    at java.lang.String.substring(String.java:1477)
    at com.sun.admserv.install.tools.OutputReaderThread.run(OutputReaderThre
    ad.java:26)
    But when I uninstall DS5.2, I can install DS5.1 sp3 successfully.
    Please tell me how I can solve the problem.
    Thanks!

    You are correct. Dir 5.2 is not certified for AIX 5.2. It does install though. Like a previous reponse stated. Check the permissions for the user you are installing with and the file system you are installing to. Make certain you have enough disk space. My install took 150 MB of disk space. Finally, Dir 5.2 creates the file "/var/adm/sw/productregistry" during install. If you do not have permissions to /var/adm/sw, you may have troubles.
    Tim
    Computer Systems Engineer
    Komatsu Canada Limited

  • SUN ONE Directory Server installation Problem on Win XP

    Can some one look at the installation error on WIndows XP
    ERROR: Ldap authentication failed for url ldap://santoshlaptop.cook.com:51303/o=NetscapeRoot user id admin (151:Unknown error.)
    Fatal Slapd Did not add Directory Server information to Configuration Server.
    Configuration of the Directory Server failed.
    Error Directory Server configuration failure
    Checking connection to the Configuration Directory Server... failed.
    The Admininistration Server cannot be configured.
    Error Administration Server configuration failure
    Error Configuration of the server(s) failed
    Thanks a lot
    Santosh

    HI everyone,
    I tried installing directory server 5.2 p4 on WIN XP Professional machine and got the following error:
    [slapd-Teja]: starting up server ...
    [slapd-Teja]: [22/Sep/2006:13:25:52 -0400] - Sun Java(TM) System Directory Server/5.2_Patch_4 B2005.230.0301 (32-bit) starting up
    [slapd-Teja]: [22/Sep/2006:13:25:54 -0400] - Listening on all interfaces port 30145 for LDAP requests
    [slapd-Teja]: [22/Sep/2006:13:25:54 -0400] - slapd started.
    Your new directory server has been started.
    Created new Directory Server
    Start Slapd Starting Slapd server configuration.
    ERROR: Ldap authentication failed for url ldap://ldapteja.hcs.com:30145/o=NetscapeRoot user id admin (151:Unknown error.)
    Fatal Slapd Did not add Directory Server information to Configuration Server.
    Configuration of the Directory Server failed.
    Error Directory Server configuration failure
    Checking connection to the Configuration Directory Server... done.
    Registering Administration Server with Configuration Directory Server... done.
    Loading Administration Server tasks... done.
    Loading global Administration Server configuration... done.
    Generating configuration files ... done.
    Writing Administration Server keys to the Windows registry... done.
    Configuration of the Administration Server succeeded.
    Administration server started properly.
    Error Configuration of the server(s) failed.
    Click Next to continue.
    In fact I did install 5.2 before on my machine but I think it was 5.2 p2. I then installed 5.1 on the same machine.. as the machine was running slow I uninstalled both 5.1 and 5.2 as well.. but from then on I cannot install 5.2 on my lasptop .. can please suggest me some thing that can fix this problem..
    I had this in my host file
    192.168.1.107 Teja.hcs.com..
    Any help is reatly appreciated ..

  • Active Directory Server Problem

    Hi All,
    This mail Seeks to get help from people who have worked with Active Directory Server.
    The following is our Current scenario.
    We are in the process of establishing an SSL connection to Active Directory Server from java environment(a standalone class) in Windows 2000.
    1.Active Directory Server is installed in an independent Win 2k machine.
    2.SSL is enabled in the Active Directory Server Machine by installing the Enterprise Root Certificate.
    3.Microsoft High Encryption pack is installed in both the client and the Server(AD)
    4.The .cer file from the AD machine is imported in to the Client's keystore(cacerts) using the keytool utility.
    5.The AD m/c is part of a domain named "rsa" and client m/c is part of the domain named "cts"
    With the above setup,The following code tries to Establish an SSL context to the AD through JNDI.
    Hashtable env = new Hashtable();
    env.put(Context.INITIAL_CONTEXT_FACTORY,"com.sun.jndi.ldap.LdapCtxFactory");
    env.put(Context.PROVIDER_URL,"ldap://blr03srv1.rsa.com:636");
    env.put(Context.SECURITY_PROTOCOL, "ssl");
    env.put(Context.SECURITY_AUTHENTICATION, "simple");
    env.put(Context.SECURITY_PRINCIPAL,"CN=Administrator,CN=Users,DC=rsa,DC=com");
    env.put(Context.SECURITY_CREDENTIALS,"password");
    try{
         DirContext ctx = new InitialDirContext(env);
         ctx.close();
    }catch (Exception e){
         e.printStackTrace();
    When we try to run this Client we are facing a SSLHandShakeException with a message saying "No trusted certificate found".
    As far as we know the .cer file is successfully imported in to the cacerts which is used by the J2SE as the default keystore.
    Hence we ran out of ideas,as we think that there could be some other issue which is causing this problem.
    We are looking forward to get inputs from AD enlightened people to Solve this issue
    Thanks in Advance,
    Manivannan.A

    I had problem the same and still I did not obtain to decide it, if for perhaps obtaining he passes me the solution.
    thank's
    Fernando Queiroz Fonseca
    Graduando em Engenharia El�trica
    Universidade Federal de Uberl�ndia
    http://www.fernandoqueiroz.com.br
    email : [email protected]

  • Directory Server 6.2 upgrade to 6.3: import LDIF problem

    Hi all,
    I have tried upgrading my Directory Server 6.2 to version 6.3 because of the database integrity issues as stated in:
    http://blogs.sun.com/dsee/entry/directory_server_6_2_database
    I have followed the steps defined in this article:
    1. Shut down each directory server instance, as described in Starting, Stopping, and Restarting a Directory Server Instance.
    2. Perform an LDIF export of the database, as described in Backing Up to LDIF.
    3. Install the hotfix for bug 6642430 on Directory Server 6.2, or upgrade your Directory Server 6.2 instance to Directory Server 6.3 once Directory Server 6.3 is available for download (early April). You will need to login to Sunsolve in order to see this bug description.
    But when importing the LDIF export, I got the following error:
    [17/Dec/2008:14:44:08 +0100] - import ec: WARNING: Skipping entry "sunPortalAdminPortalDomainPortalServerInstanceMonitoringID=Monitoring,sunPortalAdminPortalDomainPortalServerInstanceID=sol10portal-80,sunPortalAdminPortalDomainPortalID=portal1,sunPortalAdminPortalDomainID=defaultDomain,o=example" whichIt's the only information I get about why the entry was skipped (I did not forget to copy the part after 'which', there was no information there :-))
    This resulted in a missing Portal instance configuration and thus I got a 'configuration error' when surfing through the gateway to the portal.
    I have also tried: manually importing that entry, which resulted in a 'Object does not exist' error. I have tried copying the whole tree from another backup with identical setup, which wasn't working either.
    Did anyone experience the same problems before? Did I do something wrong or is there a workaround for this?
    Second question: What is the exact reason why a export and import is necessary? Or is it only necessary if the database is already corrupt? Is there a way to check that?
    Thanks alot!
    Sten

    The entry was not imported most likely because it's parent isn't in the database yet. Are entries above this in another backend ? If so try importing that backend first. Also, that dn is so long, that it exhausted the buffer which is used to write messages in the access log. This is why, there's nothing after "which".
    What is the exact reason why a export and import is necessary? Or is it only necessary if
    the database is already corrupt? Is there a way to check that?The database corruption could be silent. So a binary backup/restore when going from 6.2 to 6.3 is not recommended and the LDIF route must be used.

  • Problem in Publishing the certificate to directory server

    I am having problem regarding the publishing the certificate.I am using iPlanet CMS 4.7 and iPlanet directory server 5.1
    In the CMS >certificate manager > publishing module > mapper
    It provides(manuals) two options to enable the publishing to directory server, i.e
    1)create entry automatically(default plug -in)
    2)Manual entry in directory and mapper to map it.
    I tried both way.When automatically create option is selected it fires an error:
    Failed to create the CA entry.There may be entries in the directory hierachy which do not exist.Please create them manually.
    I am not able to figure out the problem,even if I create certificate hierachy in the directory server it gives the same error.Can anyone figure out the problem so i can publish certificate.Pleae mail me the solution if anybody knows.Thank you

    Hi,
    1. Please open the original project in Captivate 3. i.e. the .cp file in Captivate 3
    2. Go to menu "Audio > Audio Settings"
    3. Change the bitrate to 96kbps or 64kbps
    4. Change the Encoding ferwquency to 44Khz
    5. Save and close the project
    6. Now open the same project in Captivate 5
    7. publish the project
    Audio should play correctly now..
    Hope this helps.
    Regards,
    mukul

  • Directory Server Enterprise Edition 7.0 Installation Problem

    Hi Team,
    While I am trying to install Directory Server 7.0 in windows 2003 server machine ,the following problems are occured.
    D:\Sun7.0\sun-dsee7\dsee7\bin>dsccsetup.exe status
    DSCC Agent is not registered in Cacao
    DSCC Registry has been created
    Path of DSCC registry is D:/Sun7.0/sun-dsee7/dsee7/var/dcc/ads
    Port of DSCC registry is 3998
    I was able to create DSCC registry successfully.But while registerng DSCC agent in Cacao some probelm occurs
    I ran dsccsetup.exe cacao-reg command.But its throwing
    Configuring Cacao...
    ## Failed to run D:/Sun7.0/sun-dsee7/dsee7/ext/cacao_2/configure.bat
    #### D:\Sun7.0\sun-dsee7\dsee7\bin>"D:\Sun7.0\sun-dsee7\dsee7\ext\cacao_2\lib\pr
    ivate\perl\bin\perl" -I "D:\Sun7.0\sun-dsee7\dsee7\ext\cacao_2\lib\private\perl\
    site\lib" "D:\Sun7.0\sun-dsee7\dsee7\ext\cacao_2\configure.pl"
    ## Exit code is -1073741819
    Failed to configure Cacao.
    Please any one help me.....
    Let me know if any details you need

    Now its working fine. Actually problem is my machine physical memory size is 1 GB RAM.After i test with 4 GB RAM machine DSCC Agent is created on Cacao Successfully.
    -Selvaraj

Maybe you are looking for