EDSPermissionError(-14120) problems with LDAP, SSL and Directory Utility

Hello everyone,
Apologies for the repost but I think I may have made a mistake by posting this originally in the Installation, Setup and Migration forum instead of the Open Directory forum. At least I think that may be why I didn't receive any responses.
Anyway, I've been trying to get my head around Open Directory and SSL as they are implemented in Mac OS X Server 10.5 Leopard, and have been having a few issues. I would like to set up a secure internal infrastructure based around a local Certificate Authority that signs certificates for other internal services like LDAP, email, websites, etc.
I only have one Mac OS X Server and it is kind of a small office so I have gone against best practice and simply made it a CA (through Keychain Utility). I then generated a self-signed SSL certificate through Server Admin, and used the "Generate CSR" option to create a Certificate Signing Request. This went fine, but I did have some problems signing it with the CA, because the server documentation suggested that once I signed it it would pop open a Mail message containing the ASCII version of the signed certificate - it did not, and it took me a loooong time to realize that I could simply export the copy of the signed certificate it put in my local Keychain on the server as a PEM file and paste this back into the "Add Signed or Renewed Certificate from Certificate Authority" dialog box in Server Admin. Hopefully this can be fixed in a forthcoming patch, but I thought I would mention it here in case anyone else is stuck on this issue.
Once I did this I was able to use this certificate in the web server on the same machine and sure enough I was able to connect to it with with clients who had installed the CA certificate in their system Keychains without getting any error messages - very cool.
However, I haven't had quite as much luck getting it going with LDAP/Open Directory. I installed the certificate there as well, but have run into a number of problems. At first I could not get clients (also running 10.5.2) to talk to the server at all over SSL, receiving an error in Directory Utility that the server did not support SSL. I eventually discovered that the problem seemed to lie in the fact that the OpenLDAP implementation on Leopard is not tied in with the system Keychain, necessitating some command-line voodoo to install a copy of the CA cert in a local directory and point /etc/openldap/ldap.conf at it, as documented here: http://www.afp548.com/article.php?story=20071203011158936
This allowed me to do an ldapsearch command over SSL, and seemingly turn SSL on on clients that were previously bound to the directory, and additionally allowed me to run Directory Utility on new clients and put in the server name with the SSL box checked and begin to go through the process of binding. Once this seemed to work, I turned off all plaintext LDAP communication and locked down the service by checking the "Enable authenticated directory binding," "Require authenticated binding," "Disable clear text passwords," and "Encrypt all packets" options in Server Admin. However, I am now running into a new problem, specifically that I cannot successfully bind a local account to a directory account over SSL.
Here's what happens:
1) I run Directory Utility, (or it auto-runs) and add a server, typing in the DNS name and clicking the SSL box.
2) I get asked to authenticate, and type in user credentials, including computer name (incidentally, should this be a FQDN or just a hostname?)
3) Provided I put admin credentials in here and not user-level credentials, I get taken to the "Do you want to set up Mail, VPN, etc.?" box that normally appears when you autodiscover or connect to an Open Directory server.
4) I click through, and am asked for a username and password on the server, as well as the password for my local account.
5) When I put this information in, I get a popup with the dreaded "eDSPermissionError(-14120)" and it fails.
Checking the logs in Server Admin reveals nothing special, and while I have seen a couple other threads on this error and various other binding problems:
http://discussions.apple.com/thread.jspa?messageID=5967023
http://discussions.apple.com/message.jspa?messageID=5982070
these have not solved the problem. In the Open Directory user name field I am putting the short username. I have tried putting [email protected] and the user's longname but this fails by saying the account does not exist. For some reason it does seem to work if I bind it to the initial admin account I created, but no other user accounts.
If I turn all the encryption stuff off I am able to join just fine, so I am suspecting that the error may lie in some other "under the hood" piece of software that doesn't get the CA trust settings from the Keychain or the ldap.conf file, but I'm stymied as to which piece of software this might be. Does anyone have any clues on what I might be able to do here?
Thanks,
Andrew

Hard to tell what is happening without looking at the application
source, knowing what OS & hardware you're using etc. You might want to
try running with different JVM versions to see if it's actually the VM
that is the problem. If you have a support contract with BEA you could
ask support to help you diagnose this.
Regards,
/Helena
Ayub Khan wrote:
I have an application running on Weblogic 8.1 ( with JRockit as the JVM). This
application in turns talks to an iPlanet Directory server via LDAP/SSL. The problem
seems to happen on loading the machine..the performance progressively gets worse
and after a couple of seconds, all the threads stop responding. I checked the
heap, cpu and the idle threads in the execute queue and there is nothing there
to trigger alarms...there are quite a few idle threads still and the heap and
the cpu utilization seem OK. On doing a thread dump, Is see that all the other
threads seem to be in a state where they are waiting for data from LDAP and it
is basically read only data that they are waiting on.
Does anyone know what it is going on and help point me in the right direction.
-Ayub

Similar Messages

Problem with External HD and Disk Utility

Hi. I'm using OS X Yosemite 10.10.3 on a 15 inch MBP Retina. I've been using my 2TB WD My Passport Ultra hard drive since around February of this year. Earlier today when I plugged it in, the hard drive didn't show up in my devices in finder. So, i unplugged and tried again. Still nothing. Then, I went to Disk Utility and found that the drive was there but the partition wasn't mounted and is greyed out. So i tried to verify / repair the disk but have gotten a couple different messages. One being "The partition map needs to be repaired because there's a problem with the EFI system partition's file system. The other being "Some information was unavailable during an internal lookup". This message has showed up more than any other. I've been able to get in and look at my files once to try to copy the files from the drive after a message popped up and said it "couldn't repair the disk" but i "could still open or copy files on the disk but can't save changes to files on the disk." But I encountered an error that was something along the lines of "Operation couldn't be completed because the item "..." is in use". But the file i was trying to copy wasn't open or in use by any program. SO, I'm in pretty desperate need of some help with this. I have some very important files on this drive that I can't afford to lose. A lot of it irreplaceable. Any help at all would be very much appreciated! Thanks a lot!

I recall that the old imacs could not use a HD over 130G or so unless they are partitioned. So you may need to make three partitions first with your disk utilities. It should format it at the same time.

Problem with External HDD and Disk Utility

I'm having issues with my external hdd, I keep all of my media on it, and randomly it is no longer readable, and doesn't show up on the desktop, it only gives me the options to initialize, ignore or eject, when I try to initialize it and run first aid, all of the options are greyed-out and I cannot click on them. The only option in Disk Utility that I can do is erase. Is there anyway to fix the hdd so I can continue to read and write to the device, I really don't want to lose over 600 gigs of photo's, videos and music.

Since it sounds like the disk is on the way out, I would suggest that you back it up preferably twice.
Once you have your data backed up then and only then you can start troubleshooting the problem.
What model Mac do you have?
How is the disk connect to your Mac?
Does the disk have another type of connector?
|___________________
Allan

Problem with external harddrive and disk utility

I have just about ran out of room on my iMac G3 so I went to walmart and bought a FreeAgent 320 GB external hard drive. On the bottom it says its compatible with my iMac G3 you just have to format it using disk utility.
So I open up disk utility and I see my hard drive. I click on it and then go to erase so I can format it to work on my mac. However everything on the erase page of disk utility is greyed out and and I can't click on anything.
What do I do? Thanks.

I recall that the old imacs could not use a HD over 130G or so unless they are partitioned. So you may need to make three partitions first with your disk utilities. It should format it at the same time.

Problem with LDAP in BEA Portal

Problem with LDAP in BEA Portal
I have a list of 50 user which should be cerated in portal staging(devlopment) machine and should be transfered to
production machine using LDAP
Steps which i followed to create Users
1.Create User Profile with 2 parameters branch and Role
2.I have list user in the Xls file with Username,password ,branch and Role
3.Write a java File which will read the Xls File
4.The users are created in the staging machine for the portal
Steps which i followed in LDAP to tranfer the created User form Devlopment to Production
1.Export the created user from Devlopment (which was moved as .DAT in my local directory)
2.import the user from local direcory to production machine
The Users are imported in the production machine with username and password but the role and branch values are empty
We need a solution for importing the user with role and branch corresponding to each user.
Thanks in Adv
Suresh

In Portal 8.1, user name and password in stored in LDAP where as user profile values are stored in database. That is the reason you are not able to see the user profile values.
Check once again whether you can see these values through admin tool. In case,it is not(after confirmation again),you might have to use APIs to do this for you incase you dont want to manage through Admin Tool.
Thanks,
Prashanth Bhat.

Problems with ListViews Drag and Drop

I'm surprised that there isn't an Active X control that can do this more
easily? Would
be curious to find out if there is - although we aren't really embracing the
use of
them within Forte because it locks you into the Microsoft arena.
---------------------- Forwarded by Peggy Lynn Adrian/AM/LLY on 02/03/98 01:33
PM ---------------------------
"Stokesbary, Michael" <[email protected]> on 02/03/98 12:19:52 PM
Please respond to "Stokesbary, Michael" <[email protected]>
To: "'[email protected]'" <[email protected]>
cc:
Subject: Problems with ListViews Drag and Drop
I am just curious as to other people's experiences with the ListView
widget when elements in it are set to be draggable. In particular, I am
currently trying to design an interface that looks a lot like Windows
Explorer where a TreeView resides on the left side of the window and a
ListView resides on the right side. Upon double clicking on the
ListView, if the current node that was clicked on was a folder, then the
TreeView expands this folder and the contents are then displayed in the
ListView, otherwise, it was a file and it is brought up in Microsoft
Word. All this works great if I don't have the elements in the ListView
widget set to be draggable. If they are set to be draggable, then I am
finding that the DoubleClick event seems to get registered twice along
with the ObjectDrop event. This is not good because if I double click
and the current node is a folder, then it will expand this folder in the
TreeView, display the contents in the ListView, grab the node that is
now displayed where that node used to be displayed and run the events
for that as well. What this means, is that if this is a file, then Word
is just launched and no big deal. Unfortunately, if this happens to be
another directory, then the previous directory is dropped into this
current directory and a recursive copy gets performed, giving me one
heck of a deep directory tree for that folder.
Has anybody else seen this, or am I the only lucky one to experience.
If need be, I do have this exported in a .pex file if anybody needs to
look at it more closely.
Thanks in advance.
Michael Stokesbary
Software Engineer
GTE Government Systems Corporation
tel: (650) 966-2975
e-mail: [email protected]

here is the required code....
private static class TreeDragGestureListener implements DragGestureListener {
     public void dragGestureRecognized(DragGestureEvent dragGestureEvent) {
     // Can only drag leafs
     JTree tree = (JTree) dragGestureEvent.getComponent();
     TreePath path = tree.getSelectionPath();
     if (path == null) {
          // Nothing selected, nothing to drag
          System.out.println("Nothing selected - beep");
          tree.getToolkit().beep();
     } else {
          DefaultMutableTreeNode selection = (DefaultMutableTreeNode) path
               .getLastPathComponent();
          if (selection.isLeaf()) {
          TransferableTreeNode node = new TransferableTreeNode(
               selection);
          dragGestureEvent.startDrag(DragSource.DefaultCopyDrop,
               node, new MyDragSourceListener());
          } else {
          System.out.println("Not a leaf - beep");
          tree.getToolkit().beep();
}

Problems with captivate 8 and windows 8

I´m using captivate 8 and windows 8, and I am having problems with the visualization and publication of my projects. For visualization, there is a message of an error with syntax of the files ou directory, and nothing happens. For publication, I can´t see the project published in the browser. It opens only a text file, with the codes. Is there anyone thar can help me with that?

Acrobat 8 is not certified for Win7, particularly the x64 version. If you got the installation to go, the first step is to update AA8 to at least AA8.2. The x64 with XP required at least AA8.2 and I suspect that has not changed. I would suggest updating to the latest, either from the help menu (until no more updates are available) or by downloading the updates from the adobe.com>downloads page. For the latter, download ALL updates after your current version and install them in ORDER. They are not cummulative in most cases. You only need to reboot after the final update. The updates may get you going. If not, you may simply have to upgrade to AA9 or search for what others have been able to do in your situation.

Problem with outgoing email and 1.0.1

Outgoing email seems slower, especially with SSL enabled. I am configured with IMAP to exchange, BUT use smtp.dslextreme.com for outgoing. The email will send out but it will take over a minute. I did not have this problem with 1.0 and I had the same configuration with 1.0.

Well, i decided to use my gmail account for my outgoing smtp configuration and that works great, and with ssl. So i am going to say my problem is with dslextreme and use google for outgoing now. Thanks Apple, this phone kicks ***.

Problems with Customer Service AND unexplained charges!

I've been with Verizon for I-don't-know-how-many years, and through the years you are bound to have a few problems here and there but some of the problems are just ridiculous! It's also the same reocurring problem!!!!!!!!!!!!!!!! I was with Alltel first, before it was bought out by Verizon. The years I was with Alltel, I didn't have near as many problems. It seems EVERY time I do the smallest change or something to my phone or bill, I get a ridiculous amount of charges that I was NOT aware of, nor told about... EVEN IF I ask "So this isn't going to change my bill, or there will not be any unexpected/unexplained charges that I don't know about?"... BUT not matter how many times I ask... and NO matter how many times I am told "no"... there always is. For example.... last year, I updated and signed a new 2 year contract and purchased the first Driod. Before, my 30 day warranty was up, I was having problems with my Driod, and decided to send it in and get a new one. Before I did this.. I called customer service to make sure there would be no interuption in my bill, and there wouldn't be any unexpect charges, and there would be no difference in anything. I was told there was not, and once I recieved my new phone, just send it in and nothing would be changed. Of course, when I get my bill.. I see I was charged $500 for the new phone. It was explained to me that my credit card was reimbursed (which I never check that card, because I never used it expect to purchase the phone) and that I was recharged for the new phone, since it was a new phone. So I had to fork out the $500 (on top of my bill) and then wait months to get the $100 rebate card. Months after that, I "assumed liablity of my line" because I was on a plan with my family. I decided to have my own line, so I "assumed liability." I was not told that when I did that, I "renewed" my contract date. So I just added 6 more months to my 2 year contract. Was NOT told about that! Then again...... I was recently having problems with my Driod (the screen went black and would not come back on.) I had to turn on an OLD motorola razor, so I would not be without a phone for two days while I was waiting on my phone to come in. As soon as my phone came in, I had my Droid turned back on. I recieved my bill recently, and my bill was $200 over what it normally should be.... so I called in... apparently, when I had my phone replaced, they dropped off my data package and when I recieved my replacement driod, they never put it back on. So I was being charged for alllll my data usage... again I was NOT told about this. I wasn't even aware that they had dropped off my data package, and when/where did they get the authority to do that??? These are just a FEW of the problems that I have had.................................
Does anyone have these reoccuring problems!?

I understand that my bill can be viewed online, and I do view it fairly regularly, so if there are any unexplained charges, I can call Verizon asap. The problem does not come from me not understanding my bill, but from customer service. I have been with Verizon for a very long time, and it is a continuing problem. Where did Verizon get the 'OK' to drop my data package off my plan? Who authorized that?
After calling Verizon and trying to find out the problem, the gentleman told me that when I activated on old phone while I was waiting on my new Droid to arrive, my data package was dropped off and I "should" have been told about that. When I reactiviated my new Droid, I "should" have called and had them restart my data package. I was not aware that when you activate an old phone that data plan is taken off your plan. In all my years of having cell phones, I never make two years with one phone. I have always, at one point, had to turn on an old phone, and my data package has NEVER changed. Why would I have my data package dropped and why would I have to call Verizon to have it restarted. I would never know to do that unless I was TOLD that my data packaged HAD to be re-added when I recieved my new phone, but I was never told of that.
All of that is beside the point, the point is, Verizon was never given the authorization to change my plan. Never. My bill was taken care of and readjusted, and I am thankful for that. It does not change the fact it is always a hassle with Verizon Customer Service and I am always the one having to PROVE that I am not at fault, or that I was NEVER told of certian things. EVERY TIME I HAVE CALLED CUSTOMER SERVICE, I AM TOLD "I'M SORRY, THEY SHOULD HAVE TOLD YOU THAT."
"they should" does not help my bill with the extra armount of charges.

Problems with dropped calls and no reception on Samsung Continuum

My mother and I both purchased a Samsung Continuum in late March 2011, and have experienced the same problems with the phone. The device drops at least 2-3 calls per day, often on the same conversation; we have not found that location or time of day makes a difference. The phone freezes up frequently, even if no apps are running in the background. We lose our 3G network reception frequently, and cannot access our texts, emails, or the internet. The screen saver kicks in even when we are actively dialing a number, or typing in a text message. The overall performance of the phone is also poor, and it is quite slow much of the time.
We have raised this issue several times with a representative at one of the Verizon stores, but he states that he can find no problem with the phone, and that these issues may not be covered under our insurance plan. None of my friends with non-Samsung phones are having the same problems with phone reception and performance. I am aggravated enough with these issues that I am considering reactivating my old Blackberry, which worked like a charm.
I am not upset that my phone has not been updated to Android 2.2. I just want the phone to perform as stated, and not fail at its primary function: making and receiving phone calls. I am not certain if these problems originate with the phone, Verizon, or Samsung, nor do I care. I just want to resolve these issues as soon as possible, or I will have to look at other alternatives.
Thank you.

If this doesn't work...now what??? I have a useless $400 plus piece of unreliable junk. My Motorola Razor was ions more reliable than this phone...very, very sad but true.
What carrier were you using with the Razor? AT&T? Same area?
Dave M.
MacOSG Founder/Ambassador  An Apple User Group  iTunes: MacOSG Podcast
Creator of 'Mac611 - Mobile Mac Support' (designed exclusively for an iPhone/iPod touch)

Problems with Mail, Safari and iTunes after updating to 10.5.6

Hi all,
after installing 10.5.6 I have problems with Mail, Safari and iTunes.
The time to open mails, websides and iTunes store is increasing dramatically since the update. If I open a webside parallel with Safari and Firefox, Safari needs minimum 15 times longer to open the complete side. Mails containing HTML-code also needs a long time to be opened. Tha same Problem with iTunes store. Connecting to the Store costs at least 30 - 40 seconds. And unfortunately for every iTunes store side I open. Its terrible
Any idea or workaroung to solve that problem?
Regards
Michael

First, run Disk Utility and repair permissions and then restart.
I installed the 10.5.6 Combo update. Sometimes things get "lost in the translation" when you use Software Update depending on your installation. Perhaps you can download 10.5.6 Combo from the website and install it from your desktop.

Problems with the richTextEditor and quotes

Hello
I'm having problems with quote chars and the richText
control's htmlText. When users enter quotes into the richTextEditor
control. The quotes breaks the HTML text, meaning it's no longer
well formatted. Is there an escape char that I need to use. Or do I
need to force some kind of refresh on the control prior to using
the htmlText string?

I have been using RTE in a content management system and
found a need to replace non-standard quote characters with proper
UTF-8 character counterparts. Curly quotes in particular are
problematic. Use a replace function to substitute non-standard for
standard characters.

Problems with .ARW files and auto toning

problems with .ARW files and auto toning
let me try to explain this because this has happened in past and never found a way to resolve but i lived with it
now that I have a Sony A7R the problem is more serious
Firstly i take pride it making the picture happen all in camera, i use DRO lvl 5 to get enough light, like when i'm shooting at dusk. DRO its like doing HDR but in a single file, it lightens the darks. in my camera i'm happy with results
but when I upload them to lightroom, they come out near black.
allow me to explain
lets say I import 100 images
i double check my preferences and everything is UNCHECKED when it comes to importing options, there is no auto toning, nothing.
as the images import i see a preview in the thumbnail which looks fine.
i double click on one to enlarge it, hence leave grid view.
for a brief 1 or 2 seconds, i see the full image in all its glory but than lightroom does something funny, it darkens the image
one by one as it inspects each image, if it was a DRO image it makes it too dark.
to make this clear, the image is perfect as it was in the beginning but after a few seconds lightroom for some reason thinks it needs to correct it.
how to prevent lightroom from doing this, i want the image exactly as it is, why must lightroom apply a correction>?
i think it has to do something with interpreting the raw file and lightroom applies its own algorithm.
but here is what i dont get.....before lightroom makes the change i'm able to witness the picture exactly as it was taken and want it unchanged..
now i have to tweak each file or find a profile for it which is added work.
any ideas how to prevent lightroom from ruining my images and just leave them as they were when first detected...
there are 2 phases...one is when it originally imports and they look fine
second is scanning each image and applying some kind of toning which darkens it too much.
thanks for the help

sorry thats the auto reply message from yahoo email.
i've disabled it now
thing is, there is no DRO jpg to download from the camera
its only ARW. so my understanding is when i use DRO setting, the camera makes changes to the ARW than lightroom somehow reads this from the ARW.
but then sadly reverts it to no DRO settings.
because i notice if i take normal picture in raw mode its dark but if i apply dro to it, it comes out brighter, yet when i d/l the image from camera to lightroom, which is an ARW - there are no jpgs. lightroom decides to mess it up
so in reality there is no point in using DRO because when i upload it lightroom removes it.
is there a way to tell lightroom to preserve the jpg preview as it first sees it.
its just lame, picture appears perfect...than lightroom does something, than bam, its ruined,.
what do i need to do to prevent lightroom from ruining the image? if it was good in the first place.

Problems with itunes 8 and ipod shuffle gen 2.

Problems with itunes 8 and ipod shuffle gen 2.
I recently upgraded from itunes 7 to itunes 8 on my windows XP PC. That's when i had issues syncing my 2nd gen shuffle.
When i try to drag songs directly on it, itunes says i can't
I made a playlist and use auto fill. But when I remove it from the dock, it's either not updated, or the new songs are at the bottom of the playlist when they are supposed to be up higher. I end up having to hit auto fill twice to make it sync correctly.
Computer Specs
Windows XP SP3
384MB of Ram (works really good)
USB 1.1 connection
Pentium 4 clocked at 1.285 GHZ
IPOD Shuffle Specs
2nd Generation
1GB (964MB)
Version 1.0.4
unchecked options: open itunes when ipod is attached, Sync only checked songs, convert higher bit rate songs to 128kbps AAC, Enable sound check, Limit MAX volume, enable disk use
All those are NOT checked. Sometimes i enable disk use for seeing the IPOD_Control folder, but either way it still messes up.
Itunes Specs:
Version 8.1.1.10

This is a well-known issue. Apple changed the internal file names used with iTunes 8, which makes the ordering on 2nd generation Shuffles behave differently. There is no good workaround, apart from moving the files with a hand-crafted AppleScript program.
Apple has been silent on the issue, so nobody knows if we'll ever have a fix for it or not.

I have upgraded Apple Aperture from version 2 to version 3 and I'm having a problem with the "Highlights and Shadows" adjustment. According to the user's manual, I should have access to an advanced disclosure triangle which would allow me to adjust mid co

I have upgraded Apple Aperture from version 2 to version 3 and I'm having a problem with the "Highlights and Shadows" adjustment. According to the user's manual, I should have access to an advanced disclosure triangle which would allow me to adjust mid contrast, colour, radius, high tonal width and low tonal width.
If anyone has any suggestions as to how to access this advanced section, I'd be most grateful.

Hi David-
The advanced adjustments in the Highlights & Shadows tool were combined into the "Mid Contrast" slider in Aperture 3.3 and later. If you have any images in your library that were processed in a version of Aperture before 3.3, there will be an Upgrade button in the Highlights & Shadows tool in the upper right, and the controls you asked about under the Advanced section. Clicking the Upgrade button will re-render the photo using the new version of Highlights & Shadows, and the Advanced section will be replaced with the new Mid Contrast slider. With the new version from 3.3 you probably don't need the Advanced slider, but if you want to use the older version you can download it from this page:
http://www.apertureexpert.com/tips/2012/6/12/reclaim-the-legacy-highlights-shado ws-adjustment-in-aperture.html

EDSPermissionError(-14120) problems with LDAP, SSL and Directory Utility

Similar Messages

Maybe you are looking for