Directory Server (partially installed) on ips60

Hi I have followed the instruction "Configuring an Existing Remote Sun ONE Directory Server for Use With Sun ONE Portal Server" from "Sun ONE Portal Server Release Notes � March 2003" to install an exteral ids.
I have done the patch by copying the cos-plugin.so to the appropriate directory from INSTALL_HOME/portal/ds_patch/113177-01/SUNWamds/root/var/opt/SU
NWps/tmp/113177-01/.
After restaring the directory server, I run the ./pssetup during the installation a message appearing as:
Detected components:
Directory Server (partially installed)
Problems may result if partially installed components are used!
Remove options:
1) Remove Directory Server only
2) Continue with install
3) Exit
Choice? [3]
Is it supposed to show like this? And we ignore the problem and continue with Choice No.2?
I am currently testing Portal to sit on iAS7 and also installed an external ids51p1. All on the same machine.
Please advice

Roger,
I have confirmed that they have been combined into one package.
The question now is how can I trick Directory Server 5.2 into thinking they have been installed?
Thanks!
Joshua Preston.
Have you checked the Solaris 10 companion CDs? I
looked at my JES2005Q1 distro and you're right, those
packages are there for Sol 8 and 9, but not for 10.
I checked a couple of our Sol10 machines and neither
r had them.
If they're not on the companion CDs, I'd open a case
with tech support. This is a pretty serious
oversight.
HTH,
Roger S.

Similar Messages

Sun Directory Server 5.2 installation problem on AIX 5.2

Hi,
Am newbie to sun ds5.2 and I got stuck during installation for last 2 days. Could you pls guide to resolve this issue. Please error msg below
Checking disk space...
The following items for the product Directory Server will be installed:
Product: Directory Server
Location: /Sun/mps
Space Required: 141.70 MB
Sun ONE Directory Suite
Sun ONE Directory Server
Sun ONE Directory Console Support
Sun ONE Administration Services
Sun ONE Administration Server
Sun ONE Administration Console
Sun ONE Server Console
Sun ONE Server Console Core
Java Runtime Environment
Sun ONE Server Basic Libraries
Ready to Install
1. Install Now
2. Start Over
3. Exit Installation
What would you like to do [1] {"<" goes back, "!" exits}? 1
Installing Directory Server
|-1%--------------25%-----------------50%-----------------75%--------------100%|
[slapd-bmpdev4]: starting up server ...
error:server:The server could not be started due to invalid command syntax or
operating system resource limits.
system_errno:2
Configuration of the Directory Server failed.
Warning creating dbswitch.conf
Warning creating ssusers.conf
Error Directory Server configuration failure
Checking connection to the Configuration Directory Server... failed.
The Admininistration Server cannot be configured.
Error Administration Server configuration failure
Error Configuration of the server(s) failed.
Installation Details:
Product Result More Information
1. Directory Server Partially Installed. Refer to "Details..." for more
information. Available
2. Done
Enter the number corresponding to the desired selection for more
information, or enter 2 to continue [2] {"!" exits}: 2
thanks
Bala

You are correct. Dir 5.2 is not certified for AIX 5.2. It does install though. Like a previous reponse stated. Check the permissions for the user you are installing with and the file system you are installing to. Make certain you have enough disk space. My install took 150 MB of disk space. Finally, Dir 5.2 creates the file "/var/adm/sw/productregistry" during install. If you do not have permissions to /var/adm/sw, you may have troubles.
Tim
Computer Systems Engineer
Komatsu Canada Limited

Re-install directory server on windows

Hello all,
Yesterday I downloaded and tried to install the directory server on my laptop (to try to duplicate our production system for local development). However, during the installation process, I entered a wrong value for my hostname and the slapd didnt start up properly. When I saw that message I abonded the installation, looked up the correct values and tried to re-install.
However, as with the re-install on linux thread, I couldnt pick any component anymore. I removed the directory where the directory server was installed, tried to remove all the keys from the registry, removed the extracted setup directory but even then, I still could not reinstall anything.
Only thing weird was that the Sun ONE directory service was still visible in my list of services, even after I had stopped it, disabled it, removed the keys from the registry and removed the directory. Only key that still had the Sun ONE value in it was a legacy-slapd key, and that key I could not delete.
Any pointers how I should re-install the directory server?
Gr
Ronald

You did not mention the Windows OS version and DS version. If you intend to use DS5.2, please install Windows JDK 1.5.X proir to running the "setup.exe".
I assume you have read the Release Notes.
http://docs.sun.com/source/816-6703-10/index.html#wp27466
And noted:
===
# Microsoft Windows 2000 Server and Advanced Server SP 3 (IA-32)
Directory Server 5.2 has also been validated with Windows 2000 Service Pack 4.
# Microsoft Windows Server 2003 Enterprise Edition (IA-32)
The original release of Directory Server 5.2 has not been validated on Microsoft Windows Server 2003 Enterprise Edition. Only the compressed archive update (patchzip) is validated on this platform.
===
Your abort action might have caused the installation to become "inconsistent" so running "uninstall.exe" (in the setup directory?) may not help, anyway if you have not run :uninstall.exe" please give it a try.
See related post, not sure those info there would help you.
http://swforum.sun.com/jive/thread.jspa?threadID=54700&messageID=209308#209308
For Linux version of DS5.2 install/config, you may find "re-install" tips in my HOW-TOs useful, or not at all.
http://web.singnet.com.sg/~garyttt/
Gary

Evaluation Install of Directory Server

Hi,
This is a real beginner's question. I'm trying to evaluate iPlanet as a web server running on Windows 2000. I'm trying to test basic authentication, and so I installed iPlanet Directory server after installing the Web Server. When I logged into the administration server for the Web Server, and went to the Users and Groups tab, when I went to create a new user, I was told that I didn't have the right permissions to add a user on hitting the Create button. I figured that the problem was that I had installed Directory Server with a separate user name and password from the one to administer the web server. So I then uninstalled Directory Server and tried to reinstall it so that the passwords would match. But even though I've completely uninstalled Directory Server, I can't reinstall it. The installer runs, but it always tells me that it can't write to the LDAP directory after all the files are copied -- even though I've completely uninstalled and deleted the iPlanet folder.
Any ideas? All I really want to do is a very minimal working install of the web and directory server so I can test authentication and other functionality...
Thanks,
--John

Figured this one out on my own. Here's a note to all you Windows users. Don't try to install DS on a Windows 2000 box via a terminal session or a Remote Desktop Connection. You have to be logged directly onto the physical box in order for the DS installer to run.

Active Directory Server Problem

Hi All,
This mail Seeks to get help from people who have worked with Active Directory Server.
The following is our Current scenario.
We are in the process of establishing an SSL connection to Active Directory Server from java environment(a standalone class) in Windows 2000.
1.Active Directory Server is installed in an independent Win 2k machine.
2.SSL is enabled in the Active Directory Server Machine by installing the Enterprise Root Certificate.
3.Microsoft High Encryption pack is installed in both the client and the Server(AD)
4.The .cer file from the AD machine is imported in to the Client's keystore(cacerts) using the keytool utility.
5.The AD m/c is part of a domain named "rsa" and client m/c is part of the domain named "cts"
With the above setup,The following code tries to Establish an SSL context to the AD through JNDI.
Hashtable env = new Hashtable();
env.put(Context.INITIAL_CONTEXT_FACTORY,"com.sun.jndi.ldap.LdapCtxFactory");
env.put(Context.PROVIDER_URL,"ldap://blr03srv1.rsa.com:636");
env.put(Context.SECURITY_PROTOCOL, "ssl");
env.put(Context.SECURITY_AUTHENTICATION, "simple");
env.put(Context.SECURITY_PRINCIPAL,"CN=Administrator,CN=Users,DC=rsa,DC=com");
env.put(Context.SECURITY_CREDENTIALS,"password");
try{
     DirContext ctx = new InitialDirContext(env);
     ctx.close();
}catch (Exception e){
     e.printStackTrace();
When we try to run this Client we are facing a SSLHandShakeException with a message saying "No trusted certificate found".
As far as we know the .cer file is successfully imported in to the cacerts which is used by the J2SE as the default keystore.
Hence we ran out of ideas,as we think that there could be some other issue which is causing this problem.
We are looking forward to get inputs from AD enlightened people to Solve this issue
Thanks in Advance,
Manivannan.A

I had problem the same and still I did not obtain to decide it, if for perhaps obtaining he passes me the solution.
thank's
Fernando Queiroz Fonseca
Graduando em Engenharia El�trica
Universidade Federal de Uberl�ndia
http://www.fernandoqueiroz.com.br
email : [email protected]

Changing IP Address and ports in Directory Server 5.1 SP 4 and 5.2 SP4

I have installed multiple instance of Sun Directory Server 5.1 and 5.2 on ports 389 and 390,now I want to change the IP Address and ports, I am able to change the directory server port from 389 by editing the dse.ldif file, now I want to change the port 390 and the IP address same as directory server, can someone expert from the forum guide me.
Thanks in Advance.
Mukesh Kumar

1) I don't know what you've typed in when installing... but I've never seen that message. Are you using any language specific characters ?
Do you get the error after this screen ?
<b>
The suffix is the root of your directory tree. You may have more than
one suffix.
Suffix [dc=sun,dc=com]:
</b>
If yes, then this means that the value you typed in is not a valid DN... and you must enter a valid one.
2)The Directory Server is installed under /usr/iplanet but the database is under /var/iplanet/ds5 and configuration is under /etc/iplanet/ds5 ...
You can use symbolic links if you want to move things around.
3) You mean you downloaded the tar.gx file of iDS 5.1 and install it on Solaris 9... No problem, I do this every day. As long as you have right to create directories and files, you should be able to install as anyone. If not, you should install as root and then let the server run as a special user.
4) Solaris 9 comes with iDS5.1 packages already installed. But the server is not configured at all.
Running directoryserver setup allows you to configure it and create the database, accounts...
Running directoryserver uninstall remove the instance of the installed database... It doesn't remove the packages. You can start again a setup...
By the way, I think that iDS 5.1 on Solaris 9 comes with the full documentation... May be you should start by reading it.
Regards,
Ludovic.

Migration of sun one directory server

Hello All,
There was sun one directory server is installed in windows server 2003..
unfortunately the machine got crashed, but we have the whole folder structure(MPS) in the hard disk.
Can any one help me how can i bring that server back with that files in another windows 2003 machine.
i.e how can i configure the files and start the server.
thanks in advance..
regards
Kishore

I don't know exactly how is it in Windows environments, but in Unix if you have the whole product directories you only ought to copy them to other machine in the same directories, same owner, same permissions and it should work. I'm talking about DSSE 6.x, I don't know if for previous versions that's possible.

Error while installing iplanet directory server 5.0

Hi I am trying to install iPlanet directory server 5.0 on my local machine.My computer name doesnot contain any domain name.it is simply like "ERT3210".
While installing Directory server it is asking for the computer name and if i give the computer name without domain it is not accepting.And i am unable to rename my computer name suffixing domain name as it is not contained in any domain..Now How can i give the computer name to install directory server?.Its very urgent for me.It will be great help if any one give reply.

Start/Stop Directory Server and Start/Stop Admin Server are usually present in My Computer/Manage/Services, just start or stop the service.
Assuming the install root directory is %LDAP_ROOT%
You could always create program icons for
1) start/stop dirrectory server
%LDAP_ROOT%\slapd-%COMPUTERNAME%\start-slapd.exe
%LDAP_ROOT%\slapd-%COMPUTERNAME%\stop-slapd.exe
2) start/stop admin server
%LDAP_ROOT%\start-admin.exe
%LDAP_ROOT%\stop-admin.exe
3) SUN ONE Console (iPlanet Console)
%LDAP_ROOT%\startconsole.exe
Gary

Help me, please. Can't Install SunONE Directory Server 5.2 Beta 3 on Solari

I try to install DS on SUN ULTRA 10 with Solaris 9. We don't use internal DNS server but external one.
Cannot start console. Always I have an error:
starting up server ...
ERROR<38917> -Startup -conn=-1 msgId=-1 - Configuration error Can't find localhost name.
error:Server not running!! Failed to start ns-slapd process.
system_errno:2
Configuration of Directory Server succeededConfiguratin of the admin server Failed
The configuration is folowing:
/etc/hosts:
127.0.0.1 localhost
192.168.1.105 iplanet iplanet.mydomain.nam
/etc/resolv.conf:
search mydomain.nam
nameserver xxx.xxx.xxx.xxx
nameserver yyy.yyy.yyy.zzz
/etc/nsswitch.conf:
hosts: files dns
/etc/defaultrouter:
192.168.1.1
/etc/hostname.hme0:
iplanet
/etc/nodenam:
iplanet
/etc/netmasks:
192.168.1.0 255.255.255.0
Does anybody knows what's goin on?
Thanks in advance.
Marat.

It is not possible to obtain the Sun ONE Directory Server 5.2 BETA Software. There are various reasons, one is the BETA program has been closed for sometime now. The RR of the Sun ONE Directory Server 5.2 should be available at the end of May.
Regards
-Michael
Sun Microsystems, Inc.

How to install directory server/client on Solaris 9 for dummys

Hi,
after reading hunderts of pages, after asking questions in forums without getting the right answers, i was able to install the directory server in our company.
Here is the summary i made for myself. Perhaps it helps others to avoid the same problems.
Set up a Directory Server (sun one ds 5.1)
Present situation:
-Nisplus is installed
-Solaris OS 9 sparc 64bit is installed
-DS5 Software is normally already installed in Solaris 9. Check off with 'pkginfo | grep IPLT*'
-Otherwise install from Solaris OS 9 Disc1 with 'pkgadd -d IPLTxxxx .'
-Software setup with '/usr/sbin/directoryserver setup'
     Install admin- and directory server.
     For Directory Server use port 389 (necessary for later use of SSL)
     For Admin Server use any empty port > 1024
     Run directoryserver as root (necessary for using port 389 and for -starting servers from console)
     Use default Directory Manager DN cn=Directory manager
     Use your domain as DIT (default information tree) example: dc=example, dc=com
     As second DIT, setup installs o=NetscapeRoot. Don't change this DIT at all!!!!!
The server stores all the default schemas there which are absolutely important for the directoy
server. Don't change anything there !
-Configure software with 'idsconfig'
     Preferred - and default server xxx.xxx.xxx.xxx (ip_adds of your directory server)
     Use default search scope one
     Use credential's Proxy
     Use authentication Simple (you may change this later if needed)
     All the rest should remain on default settings
     You will be asked for a proxy passwort
-Start the directoryserver console with '/usr/sbin/directoryserver startconsole'
-If it's not yet running, start the directory server from console or with command 'directoryserver -s instance_name start'
-If it's not yet running, start the admin server from console or with command 'directoyserver start-admin'
-On directoryserver's gui at configuraton/password set password encryption to 'unix crypt algorithm (CRYPT)'
Import Data
-Get Data from Nisplus with
     'niscat passwd.org_dir passwd.ldap'
     'niscat hosts.org_dir hosts.ldap'
     'niscat groups.org_dir groups.ldap'
     etc
-adjust the files. (try it out with one entry of a file only. You may delete this entry with the gui very easy if it's not successfull.
-hosts.ldap must look like
xxx.xxx.xxx.xxx machine1
xxx.xxx.xxx.xxx machine2
xxx.xxx.xxx.xxx machine3
     First value is the ip-address, second one is the hostname.
     If you have more than one hostname per machine, use a second line (don't write 2 names behind the ip-address like you did in nisplus!!!)
Change content of files into ldif format
-perl migrate_hosts.pl hosts.ldap hosts.ldif
-perl migrate passwd.pl passwd.ldap passwd.ldif
-You may download the above perl-Files from http://www.padl.com
Change the converted passwd.ldif File as follows:
-before change:
dn: uid=mario,ou=People,dc=krinfo,dc=ch
uid: mario
cn: mario
objectClass: account
objectClass: posixAccount
objectClass: top
userPassword: {crypt}6O9m3uK./T/rM
loginShell: /bin/bash
uidNumber: 1020
gidNumber: 14
homeDirectory: /home/mario
-after change:
dn: uid=mario,ou=People,dc=krinfo,dc=ch
uid: mario
cn: mario
objectClass: account
objectClass: posixAccount
objectClass: shadowAccount <--- this line must be inserted
objectClass: top
userPassword: {crypt}6O9m3uK./T/rM
loginShell: /bin/bash
uidNumber: 1020
gidNumber: 14
homeDirectory: /home/mario
Insert the line for every entry in the passwd.ldif file
You may now import all these xxxx.ldif files into the directory server with
-ldapadd -h name_of_directoryserver -D "cn=Directory Manager" -w password -f XXXXX.ldif
You may use this commands later to import further data.
-Initialise a client
'ldapclient -a proxyDN=cn=proxyagent,ou=profile,dc=example,dc=com init xxx.xxx.xxx.xxx'
The xxx.xxx.xxx.xxx at the end is the ip address of the directory server
-This will make a client with data taken from the default profile from the directory server. This profile has been produced with the earlier command idsconfig and can be changed if needed.
-The System will ask you for the proxy password (given the first time in idsconfig dialog)
-You may now look at the produces files
in '/var/ldap/ldap_client_file' for the client settings
in '/var/ldap/ldap_client_cred' for the proxy settings
'ldapclient list' shows the settings of the client
With 'ldaplist -h' you may see all the existing entries with their objects.
Activate the client
-If it's not yet running, start '/usr/lib/ldap/ldap_cachemgr'
-All nisplus daemons/programs have been stopped by ldapclient command. If not, stop them manually.
-/etc/nsswitch.conf should have been copied from /etc/nsswitch.ldap from ldapclient too.
-If not, do it manually.
example
passwd: files ldap
group: files ldap
hosts ldap dns files
etc
I recommend to change the file '/etc/nsswitch.ldap' because the system oftens copies nsswitch.ldap to nsswitch.conf and if nsswitch.ldap is adapted, you must now change it again and again.
you may now check whether ldap is working fine with the following requests:
getent passwd username
getent hosts hostname
getent groups
getent network
These commands should give you the requested answer.
Be sure to clean:
/etc/hosts      inside is only your workstation and the directory server
/etc/passwd     only default and local entries
/etc/groups only default and local entries
etc
try a telnet to your own machine to check, whether password and automount of your home_dirctory works fine.
I failed here. All was working fine, but the password exchange did not because of credential/authentication problems.
Best regards and good luck
Mario

Directory Server 5.1 does not support Kerberos authentication.
Beside this there are some extensions in MS kerberos authentication that makes it almost impossible to have a MS client authenticate with something else than AD.
Regards,
Ludovic.

Installing Sun Directory Server on Windows Server 2008

Has anyone tried installing Sun Java System Directory Server in Windows Server 2008? I am trying to do this but get an error stating that nss3.dll is missing at configuration time.

Windows 2008 is not a supported platform for any DSEE release. Even if you get it working, Sun Support won't be able to help if you have issues.
This issue seems to have been reported on Windows 2000 with DSEE 6.0 too and one workaround is to remove the nss3.dll from c:\winnt\system32 or equivalent directory. Please note this workaround is not targeted at Windows 2008, so use at your own risk.
http://sunsolve.sun.com/search/document.do?assetkey=1-1-6680728-1
Winodws Native DS6.0/ISW6.0 Zip:error could not locate nss3.dll
Edited by: etst123 on Jan 29, 2009 10:39 AM
(added link to bug report)

Help!! How to install and use Sun ONE Directory Server Resource Kit 5.2

Hi ! Friend:
I have some problem on install and use Sun ONE Directory Server Resource Kit 5.2, when I execute "java DSRK", afterwards something like this : com.iplanet.install.until.wbResource::gerstring:resource bundle"locale.resources.S1DSRKResource" not found appeared in the window ,that's why?
Meanwhile ,can you give some data about it on how to use it ?
Thank you !

You should be aware of the following characteristics of your directory when using this tool:
Size and number of entries.
Directory structure and access permissions.
Virtual attributes, class of service, and indexing.
Usage, types of access, and access patterns.
Post your error messages completely.
Thanks
--Britto

Install Sun ONE Directory Server 5,2 & how to use it for authenticate user

Good afternoon, Excuse, are newbie in the scope I am learning and putting desire to him, this in my situation I am trying to install Sun ONE Directory Server 5,2 since I understand that this it is application LDAP for Solaris, ok I want to install it to authenticate user against the system, that is to say, to be able to acces the server entering with a created user from the data base of LDAP and make think user that his created in the system. But the documentation that I finds indicates the installation of Sun ONE Directory Server 5,2 but it not clearly about how to use it for authentication. Some one have any manual step by step of Sun ONE Directory Server 5,2 installation and how to make it for authentication systems users.
I read the forum seeking for anwser and i get confuse
Thanks for the help and sorry for any inconvenient
Message was edited by:
Aku_28
Message was edited by:
Aku_28

I think that I found the Sun endorsed book locations for using LDAP accounts that don't use authentication besides "crypt". I now can use an account with a "ssha" password. It can be more than 8 characters long.
Chapter 14 System Administration Guide: Naming and Directory Services
Read page 201 which is the pam.conf file pam_ldap setups. I edited my "/etc/pam.conf" file to reflect this
Chapter 7 Directory Server 5.2 2005Q4 - Administration Guide
Read page 316-318 which has a graphical technique to specify password syntax. I set it up and then tried the password by running "su - brahms". It now requires a longer password than 8 characters and it is set up to use "ssha" for that UID entry "brahms".

Can't access my Directory Server using the Console installed on a machine

can't access my Directory Server using the Console installed on a remote server, lookied into knowledge base article 4693, but still same any idea ?

I too am having problems accessing Directory server from Netscape Console installed on Winxp.
If I try to open Directory server it doesn't give any error. No windows nothing.
If I try th same from the machine on which it is installed everything is fine. What is strange is that it did open a couple of times. But at the same time I can open the admin server, Netscape Messaging server from the xp box. Searching all over for a solution. Any help/pointers would be greatly appreciated.
Config details:
iDS4.13, iMS 5.0, running on Sol 8 box
Netscape Console 4.2 on WinXP.
Thanks

Is it a safe to install DFS namespace service to an Active Directory Server?

Hi All,
Is it safe and/or best practice to install a DFS namespace server to a server that runs an Active directory services?
I have read a blog in which, as much as possible, active directory server should only run the directory services and no other installed services. But we're running out of a physical server and our virtual environments were already full so I'm hoping that
DFS namespace server could be installed to the AD server.
Also, if its possible , what could be the possible conflicts/problems/errors that we might encounter in the near future of running this 2 services into a single server?
Appreciate any suggestions and feedbacks.

Hi,
>>Is it safe and/or best practice to install a DFS namespace server to a server that runs an Active directory services?
Yes, we can host DFS namespace on domain controllers. However, as the following article states:
When deciding whether to host a DFS namespace on a domain controller, consider the following factors:
Only members of the Domain Admins group can manage a DFS namespace hosted on a domain controller.
If you plan to use a domain controller to host a DFS namespace, the server hardware must be sized to handle the additional load. As described in the previous question, root servers that host large or multiple namespaces require additional memory.
Distributed File System: Namespace Server Questions
http://technet.microsoft.com/en-us/library/hh341468(v=ws.10).aspx
Best regards,
Frank Shen

Directory Server (partially installed) on ips60

Similar Messages

Maybe you are looking for