Error -14002 -- connecting to external LDAP server -- HELP!

Hi all,
I did a clean install over an exisiting 10.4 Server that was connected via LDAP to our eDirectory. I exported and imported our custom mappings into /System/Library/DirectoryServices/Templates/LDAPv3 . (Which we can do on any of our 10.4 servers and its fine).
However it appears that the 10.5 server can't properly see the eDirectory server. We've tried all combinations of SSL on/off, port 636 or 389, using authentication or not. Whatever we do, Workgroup manager gives the following when trying to browse and will lock up if run from a client system. WGM will not lock up on the server but will still give the attached error.
"Error of type eDSOpenNodeFailed (-14002) on line 3873 of /SourceCache/WorkgroupManager/WorkgroupManager-319/PMMUGMainView.mm"
Interestingly, using an LDAP-browsing application like LDapper from the server is completely successful in browsing eDirectory.
Any takers??

Assuming you meant /etc/openldap/ldap.conf I changed mine, which now reads
something similar to the following (there doesn't seem to be any way to
get the forum to not apply some sort of wiki-style markup)
arbela:~ nw$ cat /etc/openldap/ldap.conf
# LDAP Defaults
# See ldap.conf(5) for details
# This file should be world readable but not world writable.
#BASE dc=example, dc=com
#URI ldap://ldap.example.com ldap://ldap-master.example.com:666
#SIZELIMIT 12
#TIMELIMIT 15
#DEREF never
TLS_REQCERT never
arbela:~ nw$
But I still get the same error.

Similar Messages

  • Error : Cannot connect to the LDAP server

    I have exported a file called "test1.ldif"
    and then import in a new Oracle ldap server using the command:
    ldapadd -p 389 -D cn="directory manager" -w <password> -f test1.ldif
    But there is error "Cannot connect to the LDAP server".
    Actually, I'm migrating the ldap data from 1 machine to another, please advise. Thanks

    Check your ldap port, by default it is 4032...
    --Bill                                                                                                                                                                                                           

  • Error while connecting to the LDAP server

    In LDAP Server, i have configured OU with the following characteres.
    OU=Administración.
    Now when i try to connect LDAP server from my application, am getting the following exception.
    [LDAP: error code 49 - 80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 52e, v1db0]
    javax.naming.AuthenticationException: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 52e, v1db0]
         at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3041)
         at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2987)
         at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2789)
         at com.sun.jndi.ldap.LdapCtx.connect(LdapCtx.java:2703)
         at com.sun.jndi.ldap.LdapCtx.<init>(LdapCtx.java:293)
         at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(LdapCtxFactory.java:175)
         at com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(LdapCtxFactory.java:193)
         at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(LdapCtxFactory.java:136)
         at com.sun.jndi.ldap.LdapCtxFactory.getInitialContext(LdapCtxFactory.java:66)
         at javax.naming.spi.NamingManager.getInitialContext(NamingManager.java:667)
         at javax.naming.InitialContext.getDefaultInitCtx(InitialContext.java:288)
         at javax.naming.InitialContext.init(InitialContext.java:223)
         at javax.naming.InitialContext.<init>(InitialContext.java:197)
         at javax.naming.directory.InitialDirContext.<init>(InitialDirContext.java:82)
    When i search for this, i got the this [link |http://esupport.trendmicro.com/solution/en-us/1037285.aspx/] saying some Accent characters are not converted correctly into 8-bit Unicode Transformation Format (UTF-8).
    Here i have used URLEncoder.encode(mySearchbase, "UTF-8"); to encode the special characters into UTC-8.
    I would like to know whether its a known issue with accent characters or anything else i missed here to handle those characters.
    Thanks,
    -Konanki

    Well, if you're passing an array of bytes to that LDAP access code, then that isn't the right way to encode a String to an array of bytes in UTF-8 encoding. And anyway it's been a long time since I wrote LDAP access code, but I don't recall having to pass arrays of bytes to any of those JNDI classes, so that idea is probably wrong in any case.
    I would suggest, if that page you linked to is actually relevant, that you just install the hot-fix it refers to. On the other hand if it doesn't actually apply to your situation, then you should just ignore it.
    My guess is that UTF-8 or not, your OU value on the server is in fact not "Administraci&oacute;n" -- that's based on the number of mis-encoded characters I see there. So perhaps what you are passing to the JNDI classes does in fact not match the server's value and it isn't an encoding issue at all.

  • Please Help.  How can you monitor a directory using jndi connection to a ldap server?

    How can you monitor a directory using jndi connection to a ldap server? I
    want the ldap server to monitor the content change in a file system
    directory on another computer on the network. Can someone please help.
    Thanks
    Fred

    Hi,
    Why do you want to use LDAP for Hard disk monitoring..???
    U can do this by creating a MD5 checksum for all the files existing in some
    perticular
    directory and every hour or any configurable period u can recalculate the
    checksum
    to find out the change in the content.
    I guess all u need is to get the code for "updatedb" utility of Linux and
    instrument it for ur needs..
    Hope it helps...
    -aseem
    mr wrote:
    How can you monitor a directory using jndi connection to a ldap server? I
    want the ldap server to monitor the content change in a file system
    directory on another computer on the network. Can someone please help.
    Thanks
    Fred

  • Use of external LDAP server in Weblogic Commerce Server

    I'm using the following software:
    Iplanet Directory Server v5
    Weblogic Application Server v6
    Weblogic Commerce v3.5
    I need to configure Weblogic Commerce Server to use Iplanet Directory Server directory
    services. How do I do that?
    I have a couple of questions related to this:
    1) As Weblogic Commerce Server runs on top of Weblogic v6, does it mean that to
    use an external LDAP server, I need to configure weblogic v6 to do that and not
    Weblogic Commerce Server?
    2) Whatever may be the case above, how do I do that?
    3) config.xml (weblogic application server v6) contains information that needs
    to be modified to point to an external JNDI source provider but what information
    do I need to modify?
    I'd really appreciate if someone can help me out here. Thanks!

    "JP" <[email protected]> wrote in message news:[email protected]..
    Hi,
    I'm looking for someone who has used the Lotus LDAP server for WLP7
    authentication.
    I connect my portal to the Domino LDAP, User and Groups are working
    fine, but the membership of a user to a group is not.
    I assume that it's related to the parameters I use (especially the
    membership.filter ?):
    "user.filter=(&(uid=%u)(objectclass=person));
    user.dn=O=Apac;
    membership.filter=(&(uniquemember=%M)(objectclass=groupOfNames));
    group.filter=(&(cn=%g)(objectclass=groupOfNames));
    server.host=jpgal01.apac.bea.com;
    group.dn="
    Any help would be appreciate, because I just don't where to look for.
    Try setting the com.netscape.ldap.trace property.
    \* When -D command line option is used, defining the property with
    * no value will send the trace output to the standard error. If the
    * value is defined, it is assumed to be the name of an output file.
    * If the file name is prefixed with a '+' character, the file is
    * opened in append mode.
    This will create a ldap trace file of the requests that WLS is making on the
    LDAP server. You can then see
    where the filters are not returning the correct value for the group
    membership.

  • No trusted certificate found (91);Cannot connect to the LDAP server

    HI All,
    I am trying to connect to LDAP server with the following code.
    JSSESocketFactory fact = null;
    private LDAPConnection conn = null;
    String keystore = "C:\\j2sdk1.4.2_15\\jre\\lib\\security\\cacerts";
    System.setProperty("javax.net.ssl.trustStore",keystore);
    fact = new JSSESocketFactory(null);
    conn = new LDAPConnection(fact);
    int ldapVersion = 3;//LDAPConnection.LDAP_V3; //defualt values of LDAP settings
    private int ldapPort = 636;
    LDAPAttributeSet ldapAtrbSet;
    String ldapHost;
    String loginDN;
    String loginDN_Password;
    And it is gicving me error :
    Error: netscape.ldap.LDAPException: SSL connection to 192.168.10.8:636, sun.security.validator.ValidatorException: No trusted certificate found (91); Cannot connect to the LDAP server
    netscape.ldap.LDAPException: SSL connection to 192.168.10.8:636, sun.security.validator.ValidatorException: No trusted certificate found (91); Cannot connect to the LDAP server
         at netscape.ldap.factory.JSSESocketFactory.makeSocket(JSSESocketFactory.java:105)
         at netscape.ldap.LDAPConnSetupMgr.connectServer(LDAPConnSetupMgr.java:418)
         at netscape.ldap.LDAPConnSetupMgr.openSerial(LDAPConnSetupMgr.java:350)
         at netscape.ldap.LDAPConnSetupMgr.connect(LDAPConnSetupMgr.java:244)
         at netscape.ldap.LDAPConnSetupMgr.openConnection(LDAPConnSetupMgr.java:170)
         at netscape.ldap.LDAPConnection.connect(LDAPConnection.java:1042)
         at netscape.ldap.LDAPConnection.connect(LDAPConnection.java:924)
         at netscape.ldap.LDAPConnection.connect(LDAPConnection.java:768)
         at com.reflexis.LDAP.LdapTestSSL.createConnection(LdapTestSSL.java:522)
         at com.reflexis.LDAP.LdapTestSSL.checkLdap(LdapTestSSL.java:118)
         at com.reflexis.LDAP.LdapTestSSL.main(LdapTestSSL.java:52)
    Unable to connect to LDAP server
    I have imported atr certificate also by using command:
    "keytool -import -alias jag -file c:\x225.cer -keystore c:\j
    2sdk1.4.2_15\jre\lib\security\cacerts"
    I am running my java code from eclipse. And do i have to set any thing in eclipse for certificate. I Have imported certificate from command prompt.
    Can any one please help me.It is very important for me.
    Please its very urgent.
    THanks,
    Ankush Patni

    As previously said network is a possible cause.Other things could be time on filer is too far off time on DC.AD object for filer has been deleted or change by a Windows admin.If all users are experiencing a problem, you may need to rebind it to AD - run CIFS setup at command prompt

  • Error while connecting to informatica repository server

    Hi,
    I am trying to connect to Informatica Repository Server, and getting following error:
    Failure connecting to "INFORMATICA_REP_Logical"!
    ANOMALY INFO::: Error while connecting to informatica repository server
    MESSAGE:::
    pmrep Connect Error
    =====================================
    STD OUTPUT
    =====================================
    Informatica(r) PMREP, version [8.6.1 HotFix6], build [319.0622], Windows 32-bit
    Copyright (c) Informatica Corporation 1994 - 2009
    All Rights Reserved.
    This Software may be protected by U.S. Patent Numbers 6,208,990; 6,044,374; 6,014,670; 6,032,158; 5,794,246; 6,339,775; 6,850,947; 6,895,471; 7,254,590 and other U.S. Patents Pending.
    Invoked at Sat Apr 03 15:57:50 2010
    [PCSF_10342] [PCSF_10342] Exception occurred: [[AUTHEN_10004] The Service Manager failed to authenticate user [Administrator] in the security domain [Native]. The specified user name or password is invalid.]. [FAULT_PCSFUSEREXCEPTION]
    [04/03/2010 15:57:50-[REP_12164] Domain-related error: [[DOM_10033] [DOM_10033] Service [Oracle_BI_DW_Base.rep] does not exist in domain [Domain_localhost]. [FAULT_PCSFCONFIGEXCEPTION]].]
    [Failed to connect to repository service [Oracle_BI_DW_Base.rep].]
    An error occurred while accessing the repository[Failed to connect to repository service [Oracle_BI_DW_Base.rep].]
    [04/03/2010 15:57:50-[REP_55102] Failed to connect to repository service [Oracle_BI_DW_Base.rep].]
    Repository connection failed.
    Failed to execute connect.
    Completed at Sat Apr 03 15:57:50 2010
    =====================================
    ERROR OUTPUT
    =====================================
    EXCEPTION CLASS::: com.siebel.analytics.etl.infa.interaction.PmrepConnectException
    com.siebel.analytics.etl.infa.interaction.PmrepInvoker.pmrep(PmrepInvoker.java:102)
    com.siebel.etl.gui.data.StaticDatabaseCalls.testRepositoryServer(StaticDatabaseCalls.java:959)
    com.siebel.etl.gui.data.StaticDatabaseCalls.testInformaticaServer(StaticDatabaseCalls.java:890)
    com.siebel.etl.net.ExecutionPlan.getInformaticaStatus(ExecutionPlan.java:275)
    com.siebel.etl.net.ClientMessageDispatcher$WorkerThread.mBeanRequestInformaticaStatus(ClientMessageDispatcher.java:433)
    com.siebel.etl.net.ClientMessageDispatcher$WorkerThread.consoleMessage(ClientMessageDispatcher.java:224)
    com.siebel.etl.net.ClientMessageDispatcher$WorkerThread.run(ClientMessageDispatcher.java:144)
    Kindly help.
    Regards,
    Jitendra

    I am facing the same issue.
    I am connecting from DAC, any suggestions what should have gone wrong here

  • Steps to connect an external LDAP

    Dear Gurus,
    What are the steps to connect an external LDAP like ADS.
    Pls let me know the step by step procedure e.g.
    creating the admin,guest and ??? users in Portal.Deleting the same from the LDAPs and so on.
    Thanks for the help.
    Nirmal

    Hi,
      Check the below link for LDAP connectivity...
    Integrated Windows Authentication with SAP EP 6.0 SP 3 and higher Part 1 of 2
    Regards
    Vasu

  • Connection to an LDAP server ?

    Hi,
    Did anyone knows the java code to connect to an LDAP Server ?
    thanks
    Regards, Mike

    Here there should be some hints:
    http://www.javaworld.com/javaworld/jw-03-2000/jw-0324-ldap.html
    hope this can help!

  • External LDAP Server

    Hello.
    Is it possible to configure WebLogic to use external LDAP server, which in turn is "built in" in other WebLogic (at other physical machine)?
    And if it is possible, can I use OracleInternetDirectoryAuthenticator provider for this?
    (sorry for my english)

    Hi
    OID is all together a different LDAP provider.
    You can try to create a Authenticator of type LDAPAuthenticator and accordingly provide the configurations.
    Check the below note.
    http://docs.oracle.com/cd/E17904_01/web.1111/e13707/atn.htm#i1199007

  • Using external LDAP server for  WL JNDI lookups

    I'm trying to find out if it is possible to re-direct JNDI calls to the WL
    server to an external LDAP server. I know you can install an external LDAP
    server for security purposes, but I would like to use an external LDAP
    server to handle all JNDI lookups (like for JNDI EJB name location, etc.).
    Is this possible?

    You typically need to use our JNDI store. We strongly recommend this for
    performance reasons..
    You can use the JNDI To LDAP bridge which is available from the sun web
    site.
    Michael Girdley
    BEA Systems Inc
    "Jack Archer" <[email protected]> wrote in message
    news:[email protected]..
    I'm trying to find out if it is possible to re-direct JNDI calls to the WL
    server to an external LDAP server. I know you can install an external LDAP
    server for security purposes, but I would like to use an external LDAP
    server to handle all JNDI lookups (like for JNDI EJB name location, etc.).
    Is this possible?

  • Usage of external LDAP server with Portal

    Hi All,
    We are in a situation to use external LDAP server with WLP 8.1. These are the
    constraints we have to deal with:
    1. Only read is allowed from this LDAP server.
    2. This would be used for authentication purpose
    If thats the case, how can we use Visitor Entitlements/Delegated Admin and Group
    creation using Portal Admin tool since this will write to the configured LDAP
    server.
    Can somebody answer my question:
    1. Can we use external LDAP server - just for authetication (I know this is possible
    by using JAAS LoginModule, but I just want to get confirmed on this ) and
    2. Use default and embedded LDAP server for all others like Group/Visitor Entitlements/DAs.
    Any relevant pointers are also welcome.
    TIA,
    Prashanth Bhat.

    Thanks for th ereply. Some of your answers are not clear. Can you pls eloborate
    on this?? Pls see my comments below.
    "Johnson" <[email protected]> wrote:
    >
    Phil,
    Can I use embedded LDAP for production?
    Thanks
    Lawrence
    "Phil Griffin" <BEA> wrote:
    "Prashanth " <[email protected]> wrote in message
    news:[email protected]..
    Hi All,
    We are in a situation to use external LDAP server with WLP 8.1. Theseare
    the
    constraints we have to deal with:
    1. Only read is allowed from this LDAP server.
    2. This would be used for authentication purpose
    If thats the case, how can we use Visitor Entitlements/Delegated Adminand
    Group
    creation using Portal Admin tool since this will write to the configuredLDAP
    server.
    Can somebody answer my question:
    1. Can we use external LDAP server - just for authetication (I knowthis
    is possible
    by using JAAS LoginModule, but I just want to get confirmed on this) and
    >
    You can add the external LDAP server just for authentication, but in
    versions through
    8.1 SP2 WLP will want to verify the user exists (via the UserReaderMBean)
    during
    the login process (this check has been removed in SP3). A work around
    is to
    duplicate
    the user in a provider that does impl UserReaderMBean.
    Prashanth : You mean to say we have to duplicate the User in embedded LDAP server
    also??
    >>
    2. Use default and embedded LDAP server for all others like Group/VisitorEntitlements/DAs.
    >
    Yes, the default/embedded LDAP can still be used for DA/visitor
    entitlements. In the current
    release, the Portal Admin Tools can only be configured to use a single
    authentication provider
    while forming entitlements. In SP3, all configured providers are
    listed/usable by the tools.Prashanth : How can we configure Portal Admin tool to use authentication provider
    for entitlements??
    >>
    Any relevant pointers are also welcome.
    TIA,
    Prashanth Bhat.

  • An error occurred while contacting the LDAP server.

    An error occurred while contacting the LDAP server.
    (No such object)
    The server could not locate the entry. If adding a new entry, be sure that the parent of the entry you are trying to add exists. If you received this error while searching or viewing an entry, it indicates that the entry which was being searched for does not exist.

    I did the silly thing, i gave Base DN as o=domainname.com,which is supposed to give like dc=domainname, dc=com and restarted the server. LDAP works fine.

  • Error while connecting to external server through SOAP/HTTP adapter

    Hi,
    we are trying to connect to the external server through SOAP adapter. The scenario is proxy to SOAP asynchronous scenario.
    We are getting following error in Communication channel monitoring:
    *Message processing failed. Cause: com.sap.aii.af.ra.ms.api.RecoverableException: SOAP: response message contains an error Application/UNKNOWN/APPLICATION_ERROR - application fault*
    We also tried HTTP adapter in the receiver side. But it is giving red flag in SXMB_MONI with following error:
      <?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
    - <!--  Call Adapter
      -->
    - <SAP:Error xmlns:SAP="http://sap.com/xi/XI/Message/30" xmlns:SOAP="http://schemas.xmlsoap.org/soap/envelope/" SOAP:mustUnderstand="">
      <SAP:Category>XIAdapter</SAP:Category>
      <SAP:Code area="PLAINHTTP_ADAPTER">ATTRIBUTE_SERVER</SAP:Code>
      <SAP:P1>500</SAP:P1>
      <SAP:P2>Internal Server Error</SAP:P2>
      <SAP:P3>Internal Server Error</SAP:P3>
      <SAP:P4 />
      <SAP:AdditionalText />
      <SAP:ApplicationFaultMessage namespace="" />
      <SAP:Stack>HTTP server code 500 reason Internal Server Error explanation Internal Server Error</SAP:Stack>
      <SAP:Retry>M</SAP:Retry>
      </SAP:Error>
    Please help.
    Thanks in advance.
    Regards,
    sriparna

    Make sure that the receiver webservice is up and running and in a state to receive the external calls. Confirm if the data you send is as per the requirement of the webservice and they haven't changed anything at their end.
    Regards,
    Prateek

  • Error while connecting to external SQL table using BCS identity in SharePoint 2010

    Hi all,
    I am working on SharePoint Foundation 2010. I have a stand alone setup. Now I am trying to connect to a SQL table in another server. I have used SharePoint Designer to connect using BCS. I have selected "BCS Identity" for authenticating with SQL
    in the external content type. then I created a list with this external content type.
    I get the following error upon opening the external list.
    Login failed for user 'INYKGW\sp_farm'.
    I am confused. how do I solve this error.
    any help is greatly appreciated.
    Thanks.

    Hi letShare ,
    Whether the  account 'INYKGW\sp_farm' is current user account or a service managed account?
    Could you  please  provide detail error message of ULS log  to determine the exact cause of the error.
    For SharePoint 2010, by default, ULS log is at      
    C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\LOGS
    Also please have a look at  the blog :
    http://www.wonderlaura.com/Lists/Posts/Post.aspx?ID=82
    Best Regards,
    Eric
    Eric Tao
    TechNet Community Support

Maybe you are looking for