Extend Directory Server Client Console

Hello there:
Just a tricky question.
Is there any way of extending the (Java) Graphic User Interface of the Sun One Directory Server (5.2) console?
I dunno even if this part is open source or not.
Thanks in advance.
Best regards.

Tifae,
It's kinda difficult to tell you the exact problem from your description. Do you get any errors about missing some entries under o=netscaperoot while starting the console? Alternatively, could you try using a different console to access the administration server for your existing installation? Just install another DS instance and use that console to access this admin server.

Similar Messages

How to install directory server/client on Solaris 9 for dummys

Hi,
after reading hunderts of pages, after asking questions in forums without getting the right answers, i was able to install the directory server in our company.
Here is the summary i made for myself. Perhaps it helps others to avoid the same problems.
Set up a Directory Server (sun one ds 5.1)
Present situation:
-Nisplus is installed
-Solaris OS 9 sparc 64bit is installed
-DS5 Software is normally already installed in Solaris 9. Check off with 'pkginfo | grep IPLT*'
-Otherwise install from Solaris OS 9 Disc1 with 'pkgadd -d IPLTxxxx .'
-Software setup with '/usr/sbin/directoryserver setup'
     Install admin- and directory server.
     For Directory Server use port 389 (necessary for later use of SSL)
     For Admin Server use any empty port > 1024
     Run directoryserver as root (necessary for using port 389 and for -starting servers from console)
     Use default Directory Manager DN cn=Directory manager
     Use your domain as DIT (default information tree) example: dc=example, dc=com
     As second DIT, setup installs o=NetscapeRoot. Don't change this DIT at all!!!!!
The server stores all the default schemas there which are absolutely important for the directoy
server. Don't change anything there !
-Configure software with 'idsconfig'
     Preferred - and default server xxx.xxx.xxx.xxx (ip_adds of your directory server)
     Use default search scope one
     Use credential's Proxy
     Use authentication Simple (you may change this later if needed)
     All the rest should remain on default settings
     You will be asked for a proxy passwort
-Start the directoryserver console with '/usr/sbin/directoryserver startconsole'
-If it's not yet running, start the directory server from console or with command 'directoryserver -s instance_name start'
-If it's not yet running, start the admin server from console or with command 'directoyserver start-admin'
-On directoryserver's gui at configuraton/password set password encryption to 'unix crypt algorithm (CRYPT)'
Import Data
-Get Data from Nisplus with
     'niscat passwd.org_dir passwd.ldap'
     'niscat hosts.org_dir hosts.ldap'
     'niscat groups.org_dir groups.ldap'
     etc
-adjust the files. (try it out with one entry of a file only. You may delete this entry with the gui very easy if it's not successfull.
-hosts.ldap must look like
xxx.xxx.xxx.xxx machine1
xxx.xxx.xxx.xxx machine2
xxx.xxx.xxx.xxx machine3
     First value is the ip-address, second one is the hostname.
     If you have more than one hostname per machine, use a second line (don't write 2 names behind the ip-address like you did in nisplus!!!)
Change content of files into ldif format
-perl migrate_hosts.pl hosts.ldap hosts.ldif
-perl migrate passwd.pl passwd.ldap passwd.ldif
-You may download the above perl-Files from http://www.padl.com
Change the converted passwd.ldif File as follows:
-before change:
dn: uid=mario,ou=People,dc=krinfo,dc=ch
uid: mario
cn: mario
objectClass: account
objectClass: posixAccount
objectClass: top
userPassword: {crypt}6O9m3uK./T/rM
loginShell: /bin/bash
uidNumber: 1020
gidNumber: 14
homeDirectory: /home/mario
-after change:
dn: uid=mario,ou=People,dc=krinfo,dc=ch
uid: mario
cn: mario
objectClass: account
objectClass: posixAccount
objectClass: shadowAccount <--- this line must be inserted
objectClass: top
userPassword: {crypt}6O9m3uK./T/rM
loginShell: /bin/bash
uidNumber: 1020
gidNumber: 14
homeDirectory: /home/mario
Insert the line for every entry in the passwd.ldif file
You may now import all these xxxx.ldif files into the directory server with
-ldapadd -h name_of_directoryserver -D "cn=Directory Manager" -w password -f XXXXX.ldif
You may use this commands later to import further data.
-Initialise a client
'ldapclient -a proxyDN=cn=proxyagent,ou=profile,dc=example,dc=com init xxx.xxx.xxx.xxx'
The xxx.xxx.xxx.xxx at the end is the ip address of the directory server
-This will make a client with data taken from the default profile from the directory server. This profile has been produced with the earlier command idsconfig and can be changed if needed.
-The System will ask you for the proxy password (given the first time in idsconfig dialog)
-You may now look at the produces files
in '/var/ldap/ldap_client_file' for the client settings
in '/var/ldap/ldap_client_cred' for the proxy settings
'ldapclient list' shows the settings of the client
With 'ldaplist -h' you may see all the existing entries with their objects.
Activate the client
-If it's not yet running, start '/usr/lib/ldap/ldap_cachemgr'
-All nisplus daemons/programs have been stopped by ldapclient command. If not, stop them manually.
-/etc/nsswitch.conf should have been copied from /etc/nsswitch.ldap from ldapclient too.
-If not, do it manually.
example
passwd: files ldap
group: files ldap
hosts ldap dns files
etc
I recommend to change the file '/etc/nsswitch.ldap' because the system oftens copies nsswitch.ldap to nsswitch.conf and if nsswitch.ldap is adapted, you must now change it again and again.
you may now check whether ldap is working fine with the following requests:
getent passwd username
getent hosts hostname
getent groups
getent network
These commands should give you the requested answer.
Be sure to clean:
/etc/hosts      inside is only your workstation and the directory server
/etc/passwd     only default and local entries
/etc/groups only default and local entries
etc
try a telnet to your own machine to check, whether password and automount of your home_dirctory works fine.
I failed here. All was working fine, but the password exchange did not because of credential/authentication problems.
Best regards and good luck
Mario

Directory Server 5.1 does not support Kerberos authentication.
Beside this there are some extensions in MS kerberos authentication that makes it almost impossible to have a MS client authenticate with something else than AD.
Regards,
Ludovic.

Setting up solaris 10 systems as directory server clients

I just downloaded Sun directory server and have a bunch of solaris10 boxes that I would like to use the DS for account management. Can someone point me to a definitive document (if one existe) that explains setting up the DS and initializing the unix boxes as clients?
Thanks for any help that can be provided.

This is a good one to start with
http://www.sun.com/bigadmin/features/articles/nis_ldap_part1.jsp
For setting up the directory server, look through the admin docs for your version
http://docs.sun.com/app/docs/prod/dirsvr.ee#hic

Unable to Start/Stop Directory server from console

We have two Directory Server 5.2 installations with both running as masters with replication between them. One of them was installed with the admin server and the other without. On the one that was installed without the admin server we added it afterwards.
We now find that on the one that had the admin server installed after the directory server that we cannot start/stop the directory server from the server console nor can we view or access backups or logs from the console. The system does however create the log and backup files and we can start/stop it from the command line.
I read in a post somewhere that the admin server can be created with a different user from the directory server or with the same username but a different domain and wondered if that was the problem but have looked through the configuration files on both machines and haven't managed to spot a discrepancy.
Does anyone have any ideas where and what to check?
Thanks in advance.
Peter

Ah, I wouldn't have recognized this scenario if you didn't report the scrozzled user name. The "access denied" error happens for the simple reason that 'IAyjcJlYKL' is not a valid user in your domain. Fancy that. If you look in your config.xml for the "node-manager-username" element, you may find the value is encrypted, and probably is 'IAyjcJlYKL'.
It might be best if you filed a support case for this. I can make some guesses about what you should do, but it's just a guess. In any case, if you try fixing something, make a backup of the file first.
The two things you can try doing are (backup the files and shut down everything first):
* Edit the nm_password.properties file, replacing the one "hashed" line with two lines, setting the "username" property and the "password" property, both in cleartext. When the nodemanager starts up, it will replace those two lines with the "hashed" value.
* Edit the config.xml file, replacing the values in the "node-manager-username" and "node-manager-password-encrypted" elements with their cleartext versions.
Then start up the nodemanager and server.
I'm familiar with this because I saw this happen, and I'm trying to remember the strange thing we had to do. I worked this out with BEA support a while ago. If it helps, my case number was #796710.

Directory server - administration console, system server console fail

The server is solaris 10, with the java 1.4, and the Sun One directory server 5.2 was installed from a compressed file
System Administration Server
System Administration Console
Sun Java(TM) System Server Console
All were installed, but there's no connection to the Administration Console on port 390. Isw there any documentation available that will help to troubleshoot this? Any recommendations as to how to resolve the difficulty?

I usually get to the admin console by running /var/opt/mps/serverroot/startconsole.
Its an X application so you will need to have $DISPLAY set.

Directory Server Admin Console "disappears" after logging in

Hi,
We are just starting to work with Directory Server 6.1, on RedHat 4. I access the server on which Directory Server is running via X. However, when I try to access the Admin Console and after logging in, the main Admin Console panel appears very briefly, and then everything, including the xterm window that I started with, disappears.
I've tried restarting both the slapd (slapd-xxx) and admin console (start-admin), but the same thing keeps happening.
This is the first time that I'm working with 6.1, but do I need to login/start the Admin Console a different way than before when using X?
Thanks,
Jim

Hi,
No one has responded to this thread, but for the record, one of my colleagues got it working today, and I hope that this info might help someone else someday...
I had neglected (sorry) to mention that we're in an environment where we can't run directly as root, but instead have to use sudo.
What I was doing earlier was ssh'ing to the server, then doing a "sudo bash", doing the "export DISPLAY=...", then running the startconsole to startup the Sun DS console.
So, today, I was fooling around with this with one of the other guys, and instead of doing the "sudo bash", he just did the "export DISPLAY=...", and then just "sudo ./startconsole", and, voila, we got the console GUI and were able to login without it disappearing.
I had not tried that previously, because I had thought that the "export DISPLAY=..." wouldn't have survived the sudo (I'm not that familiar with it), but I guess it does.
I'm not 100% sure what the problem was with doing the "sudo bash", but I believe it had something to do with "who we were logged-in as".
Maybe someone here who's more familiar with sudo, etc. and Cygwin X might be able to provide an explanation.
Jim

Can I get the Directory Server Console seperately?

I am in the process of re-doing our J2EE applications security using J2EE declaritive security as suppored by iAS6sp3.
Would like to have a copy of the Netscape Directory Server's "Console" program on my workstation(s). Is there a downloadable JAR/ZIP? Or something I can scrape off of my iAS installation? (Hmm would this console also work against other LDAPs (OpenLDAP)?)
Workstaion environmet(s): RH Linux 7.0; Sun JDK 1.3.1.02; WinNT 4WSsp6a Sun JDK 1.3.1.xx
TIA

Hello Fred,
The 4.2 Console is available as a stand alone download.
http://www.iplanet.com/downloads/patches/0046.html
There is a version for Linux there. I've used it on
my Red Hat 7.2 and Mandrake 8.1 boxes without a problem.
In regards to the Console working against other LDAP's.
The Netscape/iPlanet Console's utilize a specify suffix
called the "NetscapeRoot" or o=netscaperoot. This is where server specific (DS and ADMIN) information is stored among other info. This root, is what the Java Console uses to read and display , the GUI rendition
of the Servers. This is created , when the servers
are installed and is Netscape/iPlanet specific. I've
not heard of people using this Console against other
LDAP servers.
If you are needing a 5.x DS Console, then this may be
a bit trickier, As there are no Seperate Downloadable
Console for the 5.x platform, and that there isn't a
Linux version of the 5.x Directory Servers. I have heard of some people installing the 5.x DS on a seperate server and then taking the /java directory,
but this is not a supported method.
Some later versions of Directory Server may become
available for the Linux platform, when that
happens, you would be able to take the Directory Server installer and perform a custom install of just the
Console part on your remote work station.

Open directory server crashing every 30 days / clients unable to connect to calendar, contacts server

Hello everyone,
I am running an up to date Mavericks Server which serves exclusively as a calendar and contacts server for about two dozens devices. The server is reachable via DynDNS, however, the public IP hardly ever changes (only once or twice a year maybe). Tried setting the OS X DNS Server to serve "all clients" and "some clients".
For about 6 months (i.e. also under Mountain Lion), I am having a very strange problem. Roughly every 20-30 days, clients will not be able to connect to the server, instead getting a "wrong password" dialog. Restarting the open directory server will help for the next 30 days.
I have tried repairing the database as detailed here, however, the issue persists.
Any help would be highly appreciated!
I would have tried setting up a clean server installation, migrating calendars/contacts manually and re-adding all users by hand, however, I am not aware of an easy way to do so. The terminal command for calendar backup is broken under mavericks (might work with this workaround) and re-adding users manually would apparently involve correcting user UUIDs afterwards in order to match the migrated calendar data. Do you know of a better approach?
Thanks a lot!
DPSG-Scout

Hi Linc,
This looks the most relevant to me:
opendirectory.log
2014-03-11 11:13:09.460675 CET - 333.2628758.2628759 - Client: Python, UID: 93, EUID: 93, GID: 93, EGID: 93
2014-03-11 11:13:09.460675 CET - 333.2628758.2628759, Node: /Local/Default, Module: PlistFile - predicates with 'AND' are not supported
2014-03-11 12:09:00.296514 CET - State information (some requests have been active for extended period):
          Sessions: {
              28 -- opendirectoryd:
                          Session ID: 7BFBA6FE-A968-4399-A129-E3A5945E2A81
                          Refs: singleton
                          Type: Default
                          Target: localhost
          Nodes: {
              43 -- authd:
                          Node ID: 6D0E236D-6DBD-4E8C-BC01-B3F50C2C2D8E
                          Nodename: /LDAPv3/127.0.0.1
                          Session ID: <Default>
                          Refs: 1
                          Internal Use: X
an many more similar ones…
Thanks for your effort!

Directory Server Console is slow

When I try to connect to Directory Server 5.1 with the console (same machine), it is ridiculously slow to respond. The machine's performance overall is fine, but console takes several minutes to respond to each mouse click.

Greg,
Sometimes reverse lookups pose a problem if not all of the clients are in DNS.
Check the attribute "nsadminaccesshosts" of the following dn: "cn=configuration, cn=admin-serv-<host>, cn=Netscape Administration Server, cn=Server Group, cn=<hostname>, ou=<administration-domain>, o=NetscapeRoot"
Per default it gets set to "*.<your_domain>".
Try to remove the value of this attribute. Does this improve the performance (adminserver must be restarted)?
If you have security concerns doing this, you can still restrict access to the administration server by specifying the IP-addresses (attribute: "nsadminaccessaddresses").
Regards,
Jakob.

Directory Server Console Crash

Hi, I''m trying to run the Directory Server Console but when I double click on the "Directory Server" entry under "Server Group" I get the following error on the shell:
java.lang.NoSuchMethodError: com.netscape.management.client.Framework.setHelpAdminURL(Ljava/net/URL;)V
     at com.netscape.admin.dirserv.DSAdmin.run(DSAdmin.java:918)
     at com.netscape.admin.dirserv.DSAdmin.run(DSAdmin.java:1056)
     at com.netscape.management.client.topology.ServerNode$ServerRunThread.run(Unknown Source)

I get the same errors did you find a solution to the problem?

How to create a client console to connect to server in windows service using c#

my code is error
can you check the code please
client console code
partial class Program : ServiceBase
public static void Main(string[] args)
serverservice ss = new serverservice();
ss.myserver();
TcpClient tcpc = new TcpClient();
Console.WriteLine("connecting.......");
tcpc.Connect("10.128.1.116", 80);
Console.WriteLine("connected........");
Console.Write("enter msg to be transimitt");
string str = Console.ReadLine();
Stream stm = tcpc.GetStream();
ASCIIEncoding asc = new ASCIIEncoding();
byte[] ba = asc.GetBytes(str);
Console.WriteLine("transmitting..........");
stm.Write(ba, 0, ba.Length);
byte[] bb = new byte[100];
int k = stm.Read(bb, 0, 100);
for (int i = 0; i < k; i++)
Console.Write(Convert.ToChar(bb[i]));
tcpc.Close();
windows service for server code is
public partial class serverservice : ServiceBase
public serverservice()
InitializeComponent();
protected override void OnStart(string[] args)
myserver();
Thread mythread = new Thread(new ThreadStart(myserver));
mythread.Start();
public void myserver()
char d;
IPAddress ipad1 = IPAddress.Parse("10.128.1.116");
TcpListener tcpc = new TcpListener(ipad1, 80);
tcpc.Start();
// System.Diagnostics.Process.Start(@"C:\Users\PC\Documents\Visual Studio 2010\Projects\WindowsFormsApplication1\webs\webs\clientconsole\clientconsole\bin\Debug\clientconsole.exe");
Console.WriteLine("server is running at port 80");
Console.WriteLine("local end point is" + tcpc.LocalEndpoint);
Console.WriteLine("waiting for connection");
// var client=new TestExecutionEngine
Socket s = tcpc.AcceptSocket();
Console.WriteLine("connection is accepted from" + s.RemoteEndPoint);
byte[] b = new byte[100];
int k = s.Receive(b);
Console.WriteLine("received");
for (int i = 0; i < k; i++)
d = Convert.ToChar(b[i]);
Console.WriteLine(char.ToUpper(d));
ASCIIEncoding asc = new ASCIIEncoding();
s.Send(asc.GetBytes("msg is recveived"));
Console.WriteLine("\n send aknwldge");
s.Close();
tcpc.Stop();
protected override void OnStop()
EventLog.WriteEntry("stopped");

kavya --
You have erroneously posted this question in a user forum dedicated to questions about Project Online, an enterprise project management application. I would recommend you repost your question in a user forum that deals with C sharp programming questions.
Hope this helps.
Dale A. Howard [MVP]

How can I create a client console and work together with the Cache Server?

How can I edit the following Cache-Server.cmd file to create a client console and work together with the Cache Server?
The following is the cache server file: contacts-cache-server.cmd
@echo off
setlocal
if (%COHERENCE_HOME%)==() (
set COHERENCE_HOME=c:\coherence
set CONFIG=C:\home\oracle\coherence\Contacts
set COH_OPTS=%COH_OPTS% -server -cp %COHERENCE_HOME%\lib\coherence.jar;C:\home\oracle\
coherence\Contacts;C:\home\oracle\coherence\Contacts\classes;
set COH_OPTS=%COH_OPTS% -Dtangosol.coherence.cacheconfig=%CONFIG%\contacts-cache-config.xml
java %COH_OPTS% -Xms1g -Xmx1g -Xloggc: com.tangosol.net.DefaultCacheServer %2 %3 %4 %5 %6 %7
:exitEdited by: junez on 23-Oct-2009 09:20

Hi
To run the console, change DefaultCacheServer to CacheFactory
Paul

Old Netscape console 4.2 not working properly with new Directory Server 5.2

After successfully installing Messaging Server 5.2 and applying patch 2, the old Netscape Console doesn't work properly, I tried running the script which is given in the link
http://docs.sun.com/source/816-6734-10/index.html
which hobbles the server by creating a set of dummy jar files in order for the directory server console not making any changes on the messaging server. At first I got these messages:
Failed to install a local copy of msgadmin52.jar or one of its supporting files: not a ZIP file (END header not found)
I got the same message for these 2 files:
admserv42.jar
msgadmin52.jar
After that I made real dummy jar files using a zero-length file I created with touch and I got these messages:
class com.netscape.management.admser.AdminServer not found
After that I erased all the files created by the script and I get these messages:
failed to install a copy of admserv51.jar or one of its supporting files: null
failed to install a copy of msgadmin.jar or one of its supporting files: msgadmin52.jar not found at http://192.168.10.205:5001/
and for admserv42.jar I get the same message
Does anyone have a clue on what to do next??
thanks in advance
Eduardo

The thing is that the netscape console 4.5 won't work properly with messaging server 5.2, and the directory server console is not working properly for the directory server. I already know the limitations about these consoles since it is explained in the doc where the procedure of migrating from a 4.x directory server to 5.1. I

10.3.9 clients not working with 10.4.9 open directory server

I have a 10.4.9 server running open directory and managing about 20 10.4.9 clients. I am trying to have it manage our remaining 10.3.9 clients, but for whatever reason, I cannot seem to get the 10.3 clients to "attach" to the server.
I have the 10.3 clients set up in a computer list on the server, and in directory access I have it set to "get ldap mappings from server". At one point, it was suggested to me that I have the clients "get ldap mappings from open directory server". I tried this, and manually set the search base suffix. My search base suffix was "dc=example,dc=local". I even tried doing "cn=config,dc=example,dc=local" (where in both cases example.local was replaced with my real DNS name). Any suggestions on what else I could try to get this to work?

That's the odd thing though. I've done this with 10.4 no problem. Settings always worked. For some reason though, even though the clients are able to login using a network user, none of the preference settings sync.
For example - I always put a loginwindow message on as a sort of "test" to see if preferences are being set. If that works, then I rarely have a problem. No matter what I do, though, I cannot get the loginwindow message to display on the 10.3 clients. It works really well on 10.4, but not at all on 10.3. I've tried this on multiple 10.3 machines, as well, (and they're both based on different system images) but it still doesn't work. When I get back to work on Friday, I'll have to see if preferences will work for network users; that's the one thing I haven't tried.
Other than dumping the directoryaccess preferences, is there another preference setting that could be dumped on the client that may make it grab prefs from the server?

Unable to create the Directory Server entry on the LDAP Console

When I try to create the connection with the Directory Server I get the following message:
Could not contact the DSCC agent on <server>. Use the command cacaoadm to check that the DSCC agent is installed and running on port 11162.
I found a bug related to this issue and installed the patch 123893-15. I restarted the cacaoadm and the console:
root@mntsammx # cacaoadm list-params
snmp-adaptor-port=11161
snmp-adaptor-trap-port=11162
jmxmp-connector-port=11162
commandstream-adaptor-port=11163
rmi-registry-port=11164
secure-webserver-port=11165
java-flags=-Xms4M -Xmx128M -Dcom.sun.management.jmxremote -Dfile.encoding=utf-8 -Djava.endorsed.dirs=/usr/lib/cacao/lib/endorsed
micro-agent=false
java-home=/usr/jdk/jdk1.5.0_18
jdmk-home=/usr/share/lib/jdmk
nss-lib-home=/usr/lib/mps/secv1
nss-tools-home=/usr/sfw/bin
retries=4
log-file-limit=1000000
log-file-count=3
log-file-append=true
enable-instrumentation=false
user=root
group=sys
network-bind-address=127.0.0.1
watchdog-heartbeat-timeout=60
And as you can see it is running on that port. What else needs to be done ?
Thanks!

Well... this ALMOST worked. I got closer. I found out there are three cacaoadm deamons on the machine, so, I started the correct one at this time:
[server1]/opt/myuser> ps -ef | grep cacao
root 17773 1 0 Jun 12 ? 0:02 /usr/lib/cacao/lib/tools/launch -w /var/cacao/instances/default -L 16384 -P /va
myusermx 22756 20845 0 10:06:14 pts/4 0:00 grep cacao
So, I stopped the old one:
root@server1 # cd /usr/sbin
root@server1 # ./cacaoadm stop
root@server1 # ps -ef |grep cacao
root 23393 23045 0 10:16:20 pts/4 0:00 grep cacao
root@server1 #
Then I changed to the location of the correct one
cd /opt/myuser/sunoneldap/dsee6/cacao_2/usr/sbin/
[server1]/opt/myuser/sunoneldap/dsee6/cacao_2/usr/sbin> ./cacaoadm set-param network-bind-address=<my_ip>
[server1]/opt/myuser/sunoneldap/dsee6/cacao_2/usr/sbin> ./cacaoadm start
[server1]/opt/myuser/sunoneldap/dsee6/cacao_2/usr/sbin> ./cacaoadm status
default instance is DISABLED at system startup.
Current retries count : 0/4
Processes:
23755
Uptime: 0 day(s), 0:0
[server1]/opt/myuser/sunoneldap/dsee6/cacao_2/usr/sbin> ps -ef | grep cacao
myusermx 23753 1 0 10:17:53 ? 0:00 /opt/myuser/sunoneldap/dsee6/cacao_2/usr/lib/cacao/lib/tools/launch -w /opt/man
myusermx 23918 20845 0 10:18:22 pts/4 0:00 grep cacao
So, I went back to the console, at this time it let me thru the step to accept the certificate, I did click next and an exception was threw. I copied it, but I lost it. After that, I wasn't able to get to the same point again, I am back to the old message that it can't contact the cacaoadm....
Any other inputs?

Extend Directory Server Client Console

Similar Messages

Maybe you are looking for