Directory Server running GMT instead of BST

Just noticed that my server time is BST, but my Directory Server time is GMT so the timestamps are an hour behind.
I suspect this has always been the case and never been a problem, but I have just implemented a job that checks for updates in the last hour.
This is obviously not working quite as well as I hoped!
Problem is that I do not know how to change the Directory Server time and a quick search of docs and Google doesn't seem to have thrown up anything useful. Anyone had a similar problem and managed to fix it?
Thanks,
Mark.

Avon,
You are right abt that one.Infact sun just provided us a hotfix for the same.
Just curious,where do u find this list of known bugs?
Though the memory problem was fixed we ran into problems of the directory server crashing with a core.Ananlysis of the core shows that there was segmentation fault during replication.
The core says :
SIGSEGV: Segmentation Fault
g0 0 l0 ff36692c shi_allocSmall2+0x230
g1 ff18c000 slapi_delete_internal_set_pb+0x560 l1 3c
g2 22558 _start+0x5d8 l2 880010
g3 ff2036cc l3 42d0000
g4 ff4 l4 0
g5 67452301 l5 fff0
g6 0 l6 88022c
g7 fdcb1d70 l7 4
o0 42d1038 i0 0
o1 fdcb0f64 i1 fdcb100a
o2 63 i2 fdeb239c ruv_update_ruv+0x578
o3 10 i3 fed6c568 tipthread_rwlock_rdlock+0xa8
o4 4a20010 i4 237c0 do_compare+0x14
o5 410404 i5 0
sp fdcb0f00 fp fdcb0f60
o7 ff366d0c MemFreePtr+0xa4 i7 fdeb238c ruv_update_ruv+0x568
y be81ba
tstate: 4482001a02 (ccr=0x44, asi=0x82, pstate=0x1a, cwp=0x2)
pstate: ag:0 ie:1 priv:0 am:1 pef:1 mm:0 tle:0 cle:0 mg:0 ig:0
pc ff18c33c dl_get+4: ld [%i0 + 0x4], %o4
npc ff18c340 dl_get+8: cmp %o4, 0x0
dl_get() + 4
[savfp=0x0,savpc=0x0]
data address not found

Similar Messages

Adding a windows client to a sun one Directory server running on Win 2000

Hi,
I am a newbie to sun one directory server but i am familiar with windows active directory.
I have followed the instructions and installed Sun One Directory Server on Windows 2000 Server using a typical setup and create a domain and also created some users in that domain.
The next thing i wanted to do was to add a windows 2000 professional desktop on this domain and login with one of the user accounts. I tried to adding the computer to the domain via the "My Computer->Network Identification->Properties->Domain" option and gave the domain name as the one i created on the Sun One Directory Server, but i get an error saying that domain was not found.
Am i missing something here. Do i need to install some client piece on the windows 2000 desktop to add the box on the sun one domain and login in as one of the users.
Any help will be deeply appreciated?
Thanks,
Raj...

yes, you can use samba for a windows client to login to ldap
http://www.samba.org/samba/docs/man/Samba-Guide/happy.html#id2536158
, but for windows XP clients you need to tweak the registry
http://www-jerry.oit.duke.edu/linux/docs/samba/winxp_client_registry_edit

When will the DIrectory Server run on Linux?

Does anyone know when the DS software (and more specifically the admin server) will actually run on recent versions of Linux?
The version of RHE it runs on is ancient...
Is this typical Sun talking out of both sides of their mouth when it comes to Linux?
Our enterprise will likely be forced to move to a different DS (eDirectory?) if Sun is going to continue to drag it's feet around making their software run on Linux.

I can answer your questions but not in this forum - this is not the appropriate place to discuss products other than Sun's. You should be able to get my email address by clicking on the link to richm31415 next to Author:. If not, post here again.

Ubuntu Karmic authentication against Snow leopard open directory server

Hi,
I'm looking for help. I've tried to configure an installation of Karmic to authenticate against our office's open directory server running on an osx snow leopard server. Currently `getent password` show all users including those from the open directory server when running the command as both root and normal users. However authentication against the open directry users fails with the following messages in the /var/log/auth.log:-
Dec 7 22:42:05 [hostname] getent: nss_ldap: failed to bind to LDAP server ldap://server.domain.com: Invalid credentials
Dec 7 22:42:05 [hostname] getent: nss_ldap: could not search LDAP server - Server is unavailable
(I've changed the hostname and ldap url)
/etc/ldap.conf has:-
base dc=server,dc=domain,dc=com
ldap_version 3
rootbinddn cn=diradmin,dc=server,dc=domain,dc=com
bind_policy soft
pam_password md5
/etc/ldap.secret is set to the password of the diradmin user and has a permission mask of 600
/etc/pam.d/common-passwd :-
password sufficient pam_ldap.so md5
password required pam_unix.so nullok obscure md5
password optional pam_smbpass.so nullok use_authtok tryfirstpass missingok
/etc/pam.d/common-auth:-
auth [success=2 default=ignore] pam_unix.so nullok_secure
auth [success=1 default=ignore] pam_ldap.so usefirstpass
auth requisite pam_deny.so
auth required pam_permit.so
/etc/pam.d/common-account:-
account [success=2 newauthtokreqd=done default=ignore] pam_unix.so
account [success=1 default=ignore] pam_ldap.so
account requisite pam_deny.so
account required pam_permit.so
/etc/pam.d/common-session
session [default=1] pam_permit.so
session requisite pam_deny.so
session required pam_permit.so
session required pam_unix.so
session optional pam_ldap.so
session optional pamckconnector.so nox11
Does anyone have any ideas where to go from here?
Message was edited by: zebardy

Hi
It's easy enough to 'connect' any version of OS X Server to any other version of OS X Server. Use the Join button in the Users & Groups Preferences Pane. Alternatively use the Directory Utility itself.
You seem to be misunderstanding what an Open Directory Master and Replica are? They are not what I think you think they are. They are not a 'back-up' of each other if you're providing more than the shared Directory Service.
An OD Replica maintains a read-only copy of the LDAP Database (Usernames, Passwords and Policies etc) that's stored on the OD Master and nothing more. If the Master was to go offline for any reason the Replica can be quickly promoted to a Master Role and continue to provide information for the shared directory. This assumes it has easy and quick access to the Volume storing networked home folders? The LDAP Database in that case would then become writable. Later on and whenever you've fixed the problem with the old Master it can quickly be demoted and made a Replica of the now new Master.
Although this is for 10.6 Server (it is nevertheless still applicable) everything you need to know about Master and Replica relationships is here:
http://manuals.info.apple.com/en_US/OpenDirAdmin_v10.6.pdf
Page 55 onwards.
From Page 64:
"The Open Directory master and its replicas must use the same version of Mac OS X Server. . ."
If your OD Master is also providing Mail, Calendar and Contact Services then none of these will be replicated. You will have to maintain a backup of these databases yourself using whatever method you deem fit for your needs.
HTH?
Tony

Messaging server vs Directory Server

Hi everybody,
My system have 2 server, 1 is Iplanet messaging server 5.2 P2 and the other is Directory Server 5.2. Recent days, i could not check email and when checked for error i got this :
On directory server, run command netstat -an
10.12.0.6.10389 210.245.31.25.45571 49640 0 49640 0 ESTABLISHED
10.12.0.6.10389 210.245.31.25.52754 49640 0 49640 0 ESTABLISHED
10.12.0.6.10389 210.245.31.25.39489 48475 0 49640 0 ESTABLISHED
10.12.0.6.10389 210.245.31.25.40364 49640 0 49640 0 ESTABLISHED
10.12.0.6.10389 210.245.31.25.35518 49640 0 49640 0 ESTABLISHED
10.12.0.6.10389 210.245.31.25.62958 49640 0 49640 0 ESTABLISHED
10.12.0.6.10389 210.245.31.25.39052 48475 0 49640 0 ESTABLISHED
10.12.0.6.10389 210.245.31.25.39936 49640 0 49640 0 ESTABLISHED
10.12.0.6.10389 210.245.31.25.39947 48475 0 49640 0 ESTABLISHED
10.12.0.6.10389 210.245.31.25.48198 49640 0 49640 0 ESTABLISHED
10.12.0.6.10389 210.245.31.25.40819 48475 0 49640 0 ESTABLISHED
10.12.0.6.10389 210.245.31.25.42586 48475 0 49640 0 ESTABLISHED
10.12.0.6.10389 210.245.31.25.42592 49640 0 49640 0 ESTABLISHED
10.12.0.6.10389 210.245.31.25.44336 48475 0 49640 0 ESTABLISHED
Over 4000 sessions still in state ESTABLISHED (about 100 people use this mail server but not usually). So, i check the logs file (LDAP log file), i saw :
[01/Sep/2008:07:46:08 +0700] - DEBUG - conn=-1 op=-1 msgId=-1 - Listening for new connections again
[01/Sep/2008:07:46:08 +0700] - ERROR<12293> - Connection - conn=-1 op=-1 msgId=-1 - fd limit exceeded Too many open file descriptor
s - not listening on new connection
[01/Sep/2008:07:46:08 +0700] - DEBUG - conn=-1 op=-1 msgId=-1 - Listening for new connections again
[01/Sep/2008:07:46:08 +0700] - ERROR<12293> - Connection - conn=-1 op=-1 msgId=-1 - fd limit exceeded Too many open file descriptor
s - not listening on new connection
Did i reach to limitation of max-connection which this server allows ? Any ideas ?
Thanks

all4ims wrote:
My system have 2 server, 1 is Iplanet messaging server 5.2 P2 and the other is Directory Server 5.2. Recent days, i could not check email and when checked for error i got this :
On directory server, run command netstat -an
10.12.0.6.10389 210.245.31.25.45571 49640 0 49640 0 ESTABLISHEDWhat application is running on 210.245.31.25 that would require so many established connections to the directory server?
Over 4000 sessions still in state ESTABLISHED (about 100 people use this mail server but not usually). So, i check the logs file (LDAP log file), i saw :
[01/Sep/2008:07:46:08 +0700] - DEBUG - conn=-1 op=-1 msgId=-1 - Listening for new connections again
[01/Sep/2008:07:46:08 +0700] - ERROR<12293> - Connection - conn=-1 op=-1 msgId=-1 - fd limit exceeded Too many open file descriptor
s - not listening on new connection
[01/Sep/2008:07:46:08 +0700] - DEBUG - conn=-1 op=-1 msgId=-1 - Listening for new connections again
[01/Sep/2008:07:46:08 +0700] - ERROR<12293> - Connection - conn=-1 op=-1 msgId=-1 - fd limit exceeded Too many open file descriptor
s - not listening on new connection
Did i reach to limitation of max-connection which this server allows ? Any ideas ?You hit the maximum file-descriptor limit as the error points out. Remember that each TCP network connection consumes a file-descriptor.
At this point you have a few options:
1) Try to determine why there are so many active connections from the system 210.245.31.25 to the LDAP server and reduce them (e.g. restart the application holding open the connections, fix the application).
2) Increase the maximum number of file-descriptors for the system to allow for additional connections -- although this may just delay the problem from re-occurring if you don't address (1).
3) Restart the Directory Server to close the established connections. This is a short-term fix only.
Regards,
Shane.

Howto config Backup Directory Server.

Now I have primary ids 5.0. I install a backup ids and replicate netscaperoot db. But after i start backup ids console. Host name of ids server in the Admin console change to primary ids and cannot start Directory Server Console.
how to config this solution corectly?

Can you describe in detail what you have done? do you have any instance of directory server running besides o=netscaperoot instance??
If you are trying to configure replication to your backup DS you should not be having any issues.
can you privide errors you might be seeing in admin servers error logs and access logs and also any other error messages.

Logon to directory server 5.2 on win2k sp3

I have installed ds 5.2 on a win2k sp3 box.
The install prg suggests that the ds has started successfully on port xx,xxx. However, when I attempt to logon using the admin console for the specified port reported avove I recieve an err msg suggesting that the ds has not been installed to that port or is not responding.
Does anybody know whats going on with this??

Directory Server runs on one port. Administration Server runs on another.
When you login to use the Console with Administration Server, are you sure you're using the Administration Server port, not the Directory Server port?

Migrate netscape 4.12 schema to Sun One Directory server 5.2

I have a production environment with Netscape 4.12 Directory Server running. I need to migrate the production DS schema to a development server which hosts an Sun One 5.2 Directory Server.
How to perform this task. Thnaks in Adv.

Its going to be a manual process.
You need to identify what schema is missing, look up what that schema is on 4 then add it manually on 5.
There is no automated way to do it.
The easiest way to identify schema problems is to create a DS5 server instance and try to load an LDIF dump from DS4 into it. Just tackle the errors that you see, one by one ...

Directory Server Instances

We are running Sun Directory Server 5 as part of our messageing server on RHEL 4. These systems are in development as a replacement for Netscape 4.X messageing servers that are being used onboard NOAA's research vessel fleet.
Is there any way to configure mutilple instances of Directory Server on a single Linux platform (without virtualization)?
Our email systems that are operated aborad reseach vessels may, or may not, have a internet connection while underway; even if they do the bandwith is typically limited to 128KBS per vessel (no directory replication possible).
As a result we have a requirement to host one directory for the local users on the ship and a second instance that holds the addresses of all
non local users in the enterprise mail system (Basically a lookup directiry). We periodicly overwrite the second instance (lookup directory) by importing an LDIF file from our shore based systems. Both instances of the Netscape Directory Server run on a single host, using port 389 and port 390.
Can we configure Sun Directory Server is a similar manner?
Note:
We use a custom MTA system to transport the email messages between ship and shore via cell phone, sat phones Inmarsat or sattelitte based WAN connectivity, dependant upon the ship's communications equipment suite. The MTA system provides ship to shore email services as long as one communications system is available.

Yes you can have multiple intances running.
You can either start each instance on different port, or
setup an interface alias (ifconfig eth0:1 IP netmask NETMASK)
and start the second instance on that IP only.
I agree with the_dude to go for DS 6.3.
On 6.3 you can specify the listening interface/ports by using the commands
dsconf set-server-prop listen-address:127.0.0.1
dsconf set-server-prop listen-address+:192.168.1.1
dsconf set-server-prop secure-listen-address:127.0.0.1
dsconf set-server-prop secure-listen-address+:192.168.1.1
dsconf set-server-prop ldap-port:389
dsconf set-server-prop ldap-secure-port:636
hope it helps,
Giannis

Change the User ID running the SunOne Directory Server 6.3 on Windows 2003

Hi Experts,
I have an install of SunOne Directory Server Enterprise edition 6.3 running on Windows 2003 server. It was installed using the Zip distribution and is running as a user ID in the Active Directory the server is part of. We are trying to change the user ID to a service account (not the current ID which belongs to a person), so that the Sun DS can run as a service within Windows 2003 server. Need help in doing this without having to re-install the Directory server. Has anyone done this and is it possible to do?

Thank you very much for the insights and the responses sharmy28.
Appreciate it very much.
All I had to do was change the setting in this file only:
Open the file dsee6/cacao_2/etc/cacao/instances/default/private/cacao.properties and change the below line with new id...
# Define username and groupname for cacao process
process.username=sunadmin
process.groupname=sungroup
As this is Windows 2003 and the installs are all default values, I had to reboot the server for the change to take effect.
The file dsee6/cacao_2/usr/lib/cacao/lib/tools/scripts/globals.cfg does not exist. However the same file exists under the perl directory as globals.pl and the settings you specified are present there. In our case these were commented out and so I left them as is.
Thanks once again for your responses which helped me solve the issue we had.
Thanks.

Can Directory Server Console 5.1 run on Windows XP?

Directory Server 5.1 is not supported on Windows XP.
Does the Directory Server Console run on Windows XP? As far as I know is it just a Java Application and should be OS independent.
Thx,
Ingo Czaja

Yes, it does. Just download directory server for windows and install only the console.
Bye

Directory server 6.0 gateway won't run

Hi,
I am running IPlanet directory server version 5.0 with Netscape Enterprise
server 4.1. I'm trying to upgrade to IWS 6.0, but the directory server
gateway won't work. On the browser, I get:
Server Error
This server has encountered an internal error which prevents it from
fulfilling your request. The most likely cause is a misconfiguration.
Please ask the administrator to look for messages in the server's error log.
The error log says:
[24/Aug/2001:10:49:45] failure (24870) https-afmc-mil-443: for host
FSCOA262N004084 trying to GET /dsgw/bin/search, cgi_scan_headers reports:
the CGI program /servers/directory/5_0/dsgw/bin/search did not produce a
valid header (program terminated without a valid CGI header. Check for core
dump or other abnormal termination)
I've seen some messages in the Knowledge base about similar problems with
older versions of the server software. Unfortunately, they haven't helped
me much.
Thanks for any help you can provide!
Nancy

The directory server gateway may be giving error most
likely due to the upgradation of IWS 6.0 at the time up upgradation U might have not given proper bind address and port for the Directory server.This should be the most likely cause since the error message which Ur log show's says about possible misconfiguration.

Do you know if Oracle Directory Server Enterprise Edition (11.1.1.7.0) runs fine with JDK 1.7?

I work in HSGBU and i'm looking to install both ODSEE and Cognos 10 on the same server. Cognos requires JDK 1.7 and in order to enable Cognos Software to find the necessary Java components when it runs, one must set the JAVA_HOME to 1.7

Hello,
Yes, it does.
Note that the ODSEE directory server does not depends on Java, but the Admin Console (DSCC) does.
-Sylvain
Please mark the response as correct or helpful when appropriate to make it easier for others to find it

Directory Server 3.12 is running out of file descriptors

Randomly over the last few months, our directory server stops responding to requests. It has happened on 4 instances in the last 3 months. Restarting the directory server seems to fix the problem. The errors log file will report the following two messages in a loop.
[20/Feb/2002:09:30:00 -0700] Not listening for new connections - too many fds open
[20/Feb/2002:09:31:00 -0700] Listening for new connections again
Occasionally, the following error will appear as well:
[20/Feb/2002:08:34:00 -0700] FIONBIO ioctl on -1 failed
[20/Feb/2002:08:34:00 -0700] accept(4) failed errno 9 (Bad file number)
It appears that someone before me tweaked the settings on the machine which may or may not be related to the problem. The /etc/system file has the following entries:
set shmsys:shminfo_shmmax=131072000
set rlim_fd_cur=1024
set rlim_fd_max=1024

Hi David,
There are situations where you would encounter such error.
1)However, it is most likely because of the memory settings in ur system.
2)It could be a bug also in DS3.12 update ur DS with the patches available based on the operating system you are running the DS(patches for Solaris/HP unix).
3)Apply the corresponding patch and restating your Admin Server will solve your problem.
Hope this would answer you question.
cheers
Selvakumar

Open directory server crashing every 30 days / clients unable to connect to calendar, contacts server

Hello everyone,
I am running an up to date Mavericks Server which serves exclusively as a calendar and contacts server for about two dozens devices. The server is reachable via DynDNS, however, the public IP hardly ever changes (only once or twice a year maybe). Tried setting the OS X DNS Server to serve "all clients" and "some clients".
For about 6 months (i.e. also under Mountain Lion), I am having a very strange problem. Roughly every 20-30 days, clients will not be able to connect to the server, instead getting a "wrong password" dialog. Restarting the open directory server will help for the next 30 days.
I have tried repairing the database as detailed here, however, the issue persists.
Any help would be highly appreciated!
I would have tried setting up a clean server installation, migrating calendars/contacts manually and re-adding all users by hand, however, I am not aware of an easy way to do so. The terminal command for calendar backup is broken under mavericks (might work with this workaround) and re-adding users manually would apparently involve correcting user UUIDs afterwards in order to match the migrated calendar data. Do you know of a better approach?
Thanks a lot!
DPSG-Scout

Hi Linc,
This looks the most relevant to me:
opendirectory.log
2014-03-11 11:13:09.460675 CET - 333.2628758.2628759 - Client: Python, UID: 93, EUID: 93, GID: 93, EGID: 93
2014-03-11 11:13:09.460675 CET - 333.2628758.2628759, Node: /Local/Default, Module: PlistFile - predicates with 'AND' are not supported
2014-03-11 12:09:00.296514 CET - State information (some requests have been active for extended period):
          Sessions: {
              28 -- opendirectoryd:
                          Session ID: 7BFBA6FE-A968-4399-A129-E3A5945E2A81
                          Refs: singleton
                          Type: Default
                          Target: localhost
          Nodes: {
              43 -- authd:
                          Node ID: 6D0E236D-6DBD-4E8C-BC01-B3F50C2C2D8E
                          Nodename: /LDAPv3/127.0.0.1
                          Session ID: <Default>
                          Refs: 1
                          Internal Use: X
an many more similar ones…
Thanks for your effort!

Directory Server running GMT instead of BST

Similar Messages

Maybe you are looking for