FMS2 on Linux almost working!

Hi there,
I've been testing FMS2 on Linux (CentOS). I figured that
since CentOS is in essence RedHat that I shouldn't have any
trouble. The good news is that it all seems to have installed
nicely. When I attempt a ./fmsmgr list it gives me a couple
processes that are running and everything. I can even login to the
administrative system. The issue is rtmp service over 1935 isn't
responding. I attempted to connect with a simple application I
wrote but it constantly fails.
So I checked the logs and I'm basically getting this:
Apr 28 09:20:04 as 257[25875]: Server stopped .
Apr 28 09:20:44 as 257[4028]: Server starting...
Apr 28 09:20:44 as Server[4028]: No primary license key
found. Switching to Developer Edition.
Apr 28 09:20:44 as Server[4042]: No primary license key
found. Switching to Developer Edition.
Apr 28 09:20:44 as 257[4028]: Server started
(/opt/macromedia/fms/conf/Server.xml).
Apr 28 09:20:44 as Server[4045]: No primary license key
found. Switching to Developer Edition.
Apr 28 09:20:44 as Adaptor[4042]: Listener started (
_defaultRoot__edge1 ) : 19350
Apr 28 09:20:45 as Adaptor[4042]: Failed to create thread
(TCAsyncIO::init).
Apr 28 09:20:45 as Adaptor[4042]: Failed to create thread
(TCProtocolAdaptor::startListenerThread).
Apr 28 09:20:45 as Adaptor[4042]: Failed to start listeners
for adaptor _defaultRoot__edge1.
Apr 28 09:20:45 as 257[4042]: Server aborted.
Apr 28 09:20:49 as Server[5379]: No primary license key
found. Switching to Developer Edition.
Apr 28 09:20:49 as Adaptor[5379]: Listener started (
_defaultRoot__edge1 ) : 19350
Apr 28 09:20:50 as Adaptor[5379]: Failed to create thread
(TCAsyncIO::init).
Apr 28 09:20:50 as Adaptor[5379]: Failed to create thread
(TCProtocolAdaptor::startListenerThread).
Apr 28 09:20:50 as Adaptor[5379]: Failed to start listeners
for adaptor _defaultRoot__edge1.
Apr 28 09:20:50 as 257[5379]: Server aborted.
I can start, restart the service and do everything without
harm. But it seems as if the server itself is failing when it's
initialized despite admin and other services running perfectly.
I'm wondering if I need to do something to Adaptor.xml or
Vhost.xml. This is a fresh setup and I haven't touched/configured
anything. I'm not sure if I should be tweaking the
configuration...assignging any IP addresses etc.
Also you sould know that this is a shared host with multiple
domains on the same system. So I'm not sure if that will effect it
at all.
Your help is greatly appreciated, I really want to see this
working on Linux,
David

Try:
/opt/macromedia/fms/fmsmaster
If you see and error about libnspr4.so you'll need to install
some more RPMs. You can find my notes on installing FMS on linux
at:
http://renaun.com/blog/2006/11/10/149/
http://renaun.com/blog/2006/03/18/20/

Similar Messages

  • Wireless not working in linux, but works fine in windows vista

    Hello!
    I have installed Unbreakable Enterprise Linux 4 in a dual boot config. with Window Vista on a Compaq Presario laptop. After install completed I found that my on board Broadcom Wireless Adapter (Dell 1390 Mini PC card) was not recognized. I have tried installing NDISwrapper versions 1.48 and later 1.47 (after uninstalling 1.48) because everytime I got to the "modprobe ndiswrapper" received a fatal error about an unknown symbol or parameter, and on install I also encountered a "CONFIG_4KSTACKS" error as well. The good part is the light on my laptop for the wireless adapter finally came on and the driver (bcmwl5.inf) appears to be installed and the wireless adapter identified as being present, but it still doesn't show up in the network manager gui interface. So I am out of ideas if any one can give me a suggestion for a solution I would appreciate it.

    Hi there,,,,,
    I have Oracle Enterprise Linux 5 installed and Intel wifi 5100 card installed on my laptop. Wireless card does not work in Linux it works fine with Vista, I have dual boot. I have downloaded and installed the microcode for the wireless card for Linux,,,it is now active but it does not take ip address from dhcp and nor does it connect when i supply manual ip. it does not even scan for any wireless network. I have WEP enabled on my wireless network. It just says disconnected.....
    Please help me.....i have been trying to get this thing work for 3 weeks.
    thanks.

  • Custom renderer (almost works)

    I'm creating a custom JComboBox renderer. What I want it to do is display text next to a colored box. Everything works except for the default value were its not showing the text. Anyone see the problem? Or is there a better way of doing this? I’ve included the code below:
    (Renderer Code: ComboBoxRenderer.java)
    import java.awt.*;
    import java.util.ArrayList;
    import javax.swing.*;
    class ComboBoxRenderer extends JLabel implements ListCellRenderer
        String[] _textLabels = {"Red", "Green", "Blue", "Orange", "Yellow", "Cyan"};
        private ArrayList _colors = null;
        private JPanel _coloredBox = null;
        private JPanel _container = null;
        private JLabel _label = null;
        public ComboBoxRenderer()
            setOpaque(true);
            setHorizontalAlignment(CENTER);
            setVerticalAlignment(CENTER);
            // Text container (can't get text to show without it being contained inside another jpanel. Why is this?)
            _container = new JPanel();
            Dimension holderSize = new Dimension(80, 20);
            _container.setLocation(22, 0);
            _container.setSize(holderSize);
            _container.setOpaque(false);
            _container.setLayout(new BorderLayout());
            this.add(_container, BorderLayout.WEST);
            // Text
            _label = new JLabel("Disabled");
            Dimension textSize = new Dimension(80, 20);
            _label.setForeground(Color.black);
            _label.setPreferredSize(textSize);
            _label.setHorizontalAlignment(JTextField.LEFT);
            _container.add(_label, BorderLayout.WEST);
            // Colored box
            _coloredBox = new JPanel();
            Dimension preferredSize = new Dimension(16, 16);
            _coloredBox.setLocation(2, 2);
            _coloredBox.setSize(preferredSize);
            _coloredBox.setOpaque(true);
            this.add(_coloredBox, BorderLayout.WEST);
            // Initialize color list
            _colors = new ArrayList();
            _colors.add(new Color(255, 0, 0));
            _colors.add(new Color(0, 255, 0));
            _colors.add(new Color(0, 0, 255));
            _colors.add(new Color(255, 215, 0));
            _colors.add(new Color(255, 255, 0));
            _colors.add(new Color(0, 255, 255));
        public Component getListCellRendererComponent(JList list, Object value, int index, boolean isSelected, boolean cellHasFocus)
            // Get the selected index.
            int selectedIndex = ((Integer)value).intValue();
            // Set the background color for each element
            if (isSelected) {
                setBackground(list.getSelectionBackground());
                setForeground(list.getSelectionForeground());
            } else {
                setBackground(list.getBackground());
                setForeground(list.getForeground());
            // Set text
            String text = _textLabels[selectedIndex];
            _label.setText(text);
            _label.setFont(list.getFont());
            // Set box
            Color current = (Color) _colors.get(selectedIndex);
            _coloredBox.setBackground(current);
            return this;
    }(Main: CustomComboBoxDemo.java)
    import java.awt.*;
    import javax.swing.*;
    public class CustomComboBoxDemo extends JPanel
        public CustomComboBoxDemo()
            super(new BorderLayout());
            // Combo list
            Integer[] intArray = new Integer[6];
            for (int i = 0; i < 6; i++) intArray[i] = new Integer(i);
            // Create the combo box.
            JComboBox colorList = new JComboBox(intArray);
            ComboBoxRenderer renderer= new ComboBoxRenderer();
            renderer.setPreferredSize(new Dimension(120, 20));
            colorList.setRenderer(renderer);
            colorList.setMaximumRowCount(5);
            colorList.setSelectedIndex(2);
            // Lay out the demo.
            add(colorList, BorderLayout.PAGE_START);
            setBorder(BorderFactory.createEmptyBorder(20,20,20,20));
        private static void CreateAndShowGUI()
            // Create and set up the window.
            JFrame frame = new JFrame("CustomComboBoxDemo");
            frame.setDefaultCloseOperation(JFrame.EXIT_ON_CLOSE);
            // Create and set up the content pane
            JComponent newContentPane = new CustomComboBoxDemo();
            newContentPane.setOpaque(true);
            frame.setContentPane(newContentPane);
            // Display the window.
            frame.pack();
            frame.setVisible(true);
        public static void main(String[] args)
            //Schedule a job for the event-dispatching thread:
            //creating and showing this application's GUI.
            javax.swing.SwingUtilities.invokeLater(new Runnable() {
                public void run() {
                    CreateAndShowGUI();
    }Edited by: geforce2000 on Dec 13, 2009 3:37 AM
    Edited by: geforce2000 on Dec 13, 2009 3:38 AM

    BeForthrightWhenCrossPostingToOtherSites
    Here's one: [custom-renderer-almost-works|http://www.java-forums.org/awt-swing/23831-custom-renderer-almost-works.html]
    Any others?
    Next issue: TellTheDetails
    You may understand fully just what is not working here, but we don't since you tell us that it doesn't work, but never really tell us how.

  • How do i install firefox into my Red Hat Enterprise Linux Professional Work Station 3

    I do not know how to install firefox. To my Red Hat Enterprise Linux Professional Work Station 3.

    First make sure that you meet the System Requirements (GTK+ and GLib) for the current Firefox version.
    *http://www.mozilla.org/en-US/firefox/23.0/system-requirements/
    *http://kb.mozillazine.org/Installing_Firefox#Linux
    *https://support.mozilla.org/kb/Installing+Firefox+on+Linux

  • Suspend almost working, input/output error after resume

    Hi,
    I have gotten suspend to ram almost working on my sony vaio sz 28 laptop. It resumes properly and I can use the terminal to list files for a while, but I cannot launch any programs, I get "input output error" It's like the machine cannot do anything new that wasn't started before the suspend. After a while some programs quits (nm-manager), because of I/O error, and then shutdown won't even finish. At first I tought the hard drive didn't work, but since I can list files in the terminal, that shouldn't be the problem.
    Any ideas ?
    My /etc/powersave/sleep contains
    UNLOAD_MODULES_BEFORE_SUSPEND2RAM="prism54 ipw3945 i810 sky2 ath_pci "
    and
    SUSPEND2RAM_RESTART_SERVICES="ipw3945d networkcpufreq"
    thanks,
    Steinar

    I am running powersaved on a vaio c2z laptop with this config. Maybe it helps.
    UNLOAD_MODULES_BEFORE_SUSPEND2RAM=""
    SUSPEND2RAM_RESTART_SERVICES=""
    SUSPEND2RAM_SWITCH_VT="yes"
    Also you dont need to run the cpufreq service powersaved and the acpid can do this too. I disabled all of them and let the kernel
    handel my cpufreq. The only thing iam doing is to tell the system on startup which govenour it should use by default, for me thats "conservative".
    #!/bin/bash
    # /etc/rc.local: Local multi-user startup script.
    cpufreq-set -c 0 -g conservative
    cpufreq-set -c 1 -g conservative
    If i need another one i can adjust that via the terminal (cpufreq-set or via direct echo in /sys) or gnomes cpufreq applet.
    For using the kernel handler correctly you have modify these entries
    1. in /etc/powersave/cpufreq to prevent powersaved from setting cpufreq.
    CPUFREQ_ENABLED="no"
    2. in /etc/acpi/handlers.sh to prevent acpid from setting corespeed back to kernels default govenour (mostly performance) after returning from suspend.
    ac_adapter)
    case "$2" in
    AC)
    case "$4" in
    00000000)
    echo -n $minspeed >$setspeed <--- add a # before this command
    #/etc/laptop-mode/laptop-mode start
    00000001)
    echo -n $maxspeed >$setspeed <--- add a # before this command
    #/etc/laptop-mode/laptop-mode stop
    esac
    *) logger "ACPI action undefined: $2" ;;
    esac
    Have fun

  • LV2013 FPGA Linux Compile Worker errors (Xilinx 14.4)

    Hi,
    Until today, we had a nice working LV2012 Win7 and Xilinx 13.4 Linux Worker remote compilation system.
    Necessity mandated an upgrade to LV2013 FPGA for Win7. Which mandated a Linux distro upgrade to RH6.3x64 per the documentation.
    Now, our FPGA code won't compile successfully on the Linux Worker 14.4 x64, but will succeed on Win7 local worker.
    Enclosed are our xilinx.log file and a terminal capture .txt of the compilation errors from Linux Compile Worker run.
    Installation had no errors or warnings, and the Linux Compile Worker connects to the Win7 Server successfully.
    Please help, as without this optimization our code compile times are 2-3x longer.
    Our FPGA is NI-7962 FPGA (Vertex 5)
    Thanks,
    John
    Attachments:
    XilinxLog.txt ‏61 KB
    xilinx14.4_terminal_spew.txt ‏16 KB

    Thanks for getting back with more tests. The TCL prompt didn't evoke any errors and returned a friendly "hello" using puts hello.
    Attached is the output from xinfo.
    Note that the path to these files is slightly different than what you provided:
    /usr/local/natinst/NIFPGA/programs/xilinx14_4/ISE/bin/nt64/xtclsh
    mine is:
    /usr/local/natinst/NIFPGA/programs/xilinx14_4/ISE/bin/lin64/xtclsh
    /usr/local/natinst/NIFPGA/programs/xilinx14_4/common/bin/xinfo
    mine is:
    /usr/local/natinst/NIFPGA/programs/xilinx14_4/common/bin/lin64/xinfo
    Best,
    John/Carskie
    Attachments:
    xinfo.txt ‏57 KB

  • Applescript to open URL in Safari without titlebar...almost working :-)

    Hi guys,
    I'm trying to open an URL in Safari with applescript, and i don't want any toolbar in the opened window, actually this code almost works but it open 2 windows as the javascript is executed from document 1
    I use Javascript because i dont want to have any modifications of Safari preferences, so when i close it and reopen it should not have the toolbar hidden.
    <pre class="jive-pre">tell application "Safari"
    activate
    tell document 1
    do JavaScript ("window.open('http://www.google.com','_blank','titlebar=0');")
    end tell
    end tell</pre>
    Does anybody knows a way to make this work or to open a window without the toolbars ?? I've tried different things but i'm stuck, so any help appreciated.
    Thanks by advance,
    Max

    This is about the best you're going to do using JavaScript...
    <pre style="width:630px;height:auto;overflow-x:auto;overflow-y:hidden;"
    title="Copy this code and paste it into your Script Editor application.">tell application "Safari"
    activate
    set theURL to URL of document 1
    set windowID to id of window 1
    do JavaScript ("window.open('" & theURL & "','_blank','titlebar=0');") in document 1
    close window id windowID
    end tell</pre>
    The above script opens a new window with the current document's url and then closes the original window. As far as I've read you cannot get JavaScript to act upon the current window.
    Hope this helps at least a little...

  • How do I ensure that linux would work on the new Dell Latitude E6400?

    I want to purchase this laptop:
    http://www.dell.com/content/products/pr … l=en&s=bsd
    with this configuration:
    PROCESSOR    Intel® Core™ 2 Duo P8400 (2.26GHz, 3M L2 Cache, 1066MHz FSB)    edit
    OPERATING SYSTEM    Genuine Windows Vista® Home Basic SP1, With media    edit
    WARRANTY & SERVICE    3 Year Limited Warranty and 3 Year Mail-in Service    edit
    LCD PANEL    14.1" UltraSharp™ WXGA+ (1440x900) LED Display - Brush Metal Black    edit
    GRAPHICS AND EXPANSION SLOT    Mobile Intel® Graphics Media Accelerator 4500MHD With Express Card    edit
    MEMORY    2.0GB, DDR2-800 SDRAM, 2 DIMMS    edit
    INTERNAL KEYBOARD    Internal English Keyboard    edit
    CAMERA/MICROPHONE    Digital Microphone    edit
    PRIMARY STORAGE    80GB Hard Drive, 7200RPM with Free Fall Sensor    edit
    OPTICAL DRIVE    24X CDRW/DVD with Cyberlink PowerDVD™    edit
    WI-FI WIRELESS CARD    Intel® WiFi Link 5100 802.11a/g/n Draft Mini Card    edit
    FINGERPRINT READER OPTION    No Fingerprint Reader    edit
    BACKUP OS DRIVERS AND SYSTEM DOCUMENTATION    Resource DVD - Contains Diagnostics and Drivers    edit
    My Accessories
    BATTERY    9 Cell Battery    edit
    PRIMARY POWER OPTIONS    90W A/C Adapter (3-pin)    edit
    I really want to get this laptop soon, but I'll be so irritated if I tried to install arch on it and it doesn't work. Thank you for your help.

    Well, from the 'first look' reviews (there's a first look review dated today!), it seems to be a brand new model, which means there won't be many folks who have tested it. It depends on what you mean by 'work' as well. Arch is almost sure to install a basic system, but things like suspending, cpu speed changes, and wifi usually take some work on most distros in my experience. One thing to do is to google for some of the components to see if linux users have had success. Two important ones are the video card and the wireless card. If those look good, then give it a try. You might need to work at it a bit, but I usually manage with help from the forums You could even write up your experience on a wiki so that others can benefit from your experience...

  • Lightroom on Linux, partially working...

    I have been tinkering with getting Lightroom 1.3.1 to run on Linux via Wine .9.53 and have had limited success.
    In case anyone is interested in helping or just want to try it out... feel free to contact me or access the WineDB Application Database here:
    http://appdb.winehq.org/objectManager.php?sClass=application&iId=5839
    It frustrates me that I have to do things with ZERO assistance from Adobe (I'd pay a premium for a Linux version of Lightroom... if it works on OS X, it's not much more to get it going on Linux.) Once I figure out what libraries they're using to display the photos we should be all set...
    When Lightroom 1.3.1 using Wine I haven't been able to get the Develop and Library functionality working properly yet, however Importing and Exporting Photos to/from a Catalog is as fast (or faster) in Linux than it is in Windows...

    I'm having a fair amount of success getting LR working.
    I was very unimpressed with LightZone on the other hand. The interface is clunky and the stability is almost non-existent.
    Last time I checked, it's only released as a 30-day unsupported beta... which is confusing to me... you can only use it for 30 days, but it's not supported -- so who really wants to buy it?
    Apparently it's a pet-project of the (or one of THE) lightzone developers.
    I am going to attempt Lightroom 2.0 on Linux this week and see if that fares any better than 1.3.1.
    I downloaded 1.4 the night it was released (before they pulled it,) but it doesn't sound like much has improved with it.
    I invite everybody to checkout the winehq database entry for lightroom and help us troubleshoot our way to stability :)
    We have had someone successfully get everything working in Lightroom (except the opening of existing catalogs) with some 3rd party dlls and scripts.
    Recently one of the guys helping this process determined how to correct the inability to open existing catalogs... he wrote a WINE patch to fix the problem and I believe that's been submitted to the upstream.
    The problem is / was that Lightroom (based on the way it checks storage) thinks that all drives are network drives and refuses to open a catalog over the network.

  • Installing Oracle 9ias and Portal on Linux - hard work???

    Has anyone else tried to install 9ias 1.2.2.1 onto an Intel Linux platform, specifically RedHat? If so I wonder if it has been straightforward to you? If so please let me know!!! I have been struggling away at it for over three weeks, and almost nothing works out of the box, so I have to start endless TARs with OSS, and the problem is that they seem to be struggling and floundering as well. So far I have been asked for a huge amount of information and config files etc (copies of which they presumably have already) with almost nothing back. The particular problems at the moment are: changing the login server to use ldap (Oracle Internet Directory) and running portal under ssl. We (OSS and I) just can't get these to work. The latest plan by OSS is to patch portal to version 3.0.9.8.3, however, when I install that it fails, with basic shell script errors (eg : command not found)!!
    There are other problems - eg Forms doesn't work properly; Reports doesn't work at all. These things I will have to sort out later, as it gets a bit confusing for everyone having several TARs open at once.
    If anyone has any ideas or insight into this I would be grateful.
    David

    It is not easy to configure. The patches produce side effects and this has caused delays from tech support. A bundle patch was applied to Rel 2 that has solved some problems. Why rel 2 production is not shipping is anybody's guess. The lack of practical expertise means that only corporate customers get preference. I have installed on quite few (NEW) solaris boxes in Europe and it does install ok but re-install gives some problems. BUT 'timeout' is a serious problem even after working on it (1.0.2.2 v2 3.0.9.8) for more than one year. The modules are not integrated smoothly, as you also experience. The cache is not efficient.
    I suggest that you wait for rel 2 production (DOWNLOADED LACK THE PATCHES, so don't waste time) then try it on a clean box.
    Sunder (An Oracle & Portal DBA Consultant)

  • How To Install A (Almost) Working Lion Server With Profile Management/SSL/OD/Mail/iCal/Address Book/VNC/Web/etc.

    I recently installed a fresh version of Lion Server after attempting to fix a broken upgrade. With some help from others, I've managed to get all the new features working and have kept notes, having found that many or most of the necessary installation steps for both the OS and its services are almost entirely undocumented. When you get them working, they work great, but the entire process is very fragile, with simple setup steps causing breaks or even malicious behaviors. In case this is useful to others, here are my notes.
    Start with an erased, virgin, single guid partitioned drive. Not an upgrade. Not simply a repartitioned drive. Erased. Clean. Anything else can and probably will break the Lion Server install, as I discovered myself more than once. Before erasing my drive, I already had Lion and made a Lion install DVD from instructions widely available on the web. I suppose you could also boot into the Lion recovery partition and use disk utility to erase the OS X partition then install a new partition, but I cut a DVD. The bottom line is to erase any old OS partitions. And of course to have multiple, independent backups: I use both Time Machine with a modified StdExclusions.plist and Carbon Copy Cloner.
    Also, if you will be running your own personal cloud, you will want to know your domain name ahead of time, as this will be propagated everywhere throughout server, and changing anything related to SSL on Lion Server is a nightmare that I haven't figured out. If you don't yet have a domain name, go drop ten dollars at namecheap.com or wherever and reserve one before you start. Soemday someone will document how to change this stuff without breaking Lion Server, but we're not there yet. I'll assume the top-level domain name "domain.com" here.
    Given good backups, a Lion Install DVD (or Recovery Partition), and a domain name, here are the steps, apparently all of which must be more-or-less strictly followed in this order.
    DVD>Disk Utility>Erase Disk  [or Recovery Partition>Disk Utility>Erase Partition]
    DVD>Install Lion
    Reboot, hopefully Lion install kicks in
    Update, update, update Lion (NOT Lion Server yet) until no more updates
    System Preferences>Network>Static IP on the LAN (say 10.0.1.2) and Computer name ("server" is a good standbye)
    Terminal>$ sudo scutil --set HostName server.domain.com
    App Store>Install Lion Server and run through the Setup
    Download install Server Admin Tools, then update, update, update until no more updates
    Server Admin>DNS>Zones [IF THIS WASN'T AUTOMAGICALLY CREATED (mine wasn't): Add zone domain.com with Nameserver "server.domain.com." (that's a FQDN terminated with a period) and a Mail Exchanger (MX record) "server.domain.com." with priority 10. Add Record>Add Machine (A record) server.domain.com pointing to the server's static IP. You can add fancier DNS aliases and a simpler MX record below after you get through the crucial steps.]
    System Prefs>Network>Advanced>Set your DNS server to 127.0.0.1
    A few DNS set-up steps and these most important steps:
    A. Check that the Unix command "hostname" returns the correct hostname and you can see this hostname in Server.app>Hardware>Network
    B. Check that DNS works: the unix commands "host server.domain.com" and "host 10.0.1.2" (assuming that that's your static IP) should point to each other. Do not proceed until DNS works.
    C. Get Apple Push Notification Services CA via Server.app>Hardware>Settings><Click toggle, Edit... get a new cert ...>
    D. Server.app>Profile Manager>Configure... [Magic script should create OD Master, signed SSL cert]
    E. Server.app>Hardware>Settings>SSL Certificate> [Check to make sure it's set to the one just created]
    F. Using Server.app, turn on the web, then Server.app>Profile Manager> [Click on hyperlink to get to web page, e.g. server.domain.com/profilemanager] Upper RHS pull-down, install Trust Profile
    G. Keychain Access>System>Certificates [Find the automatically generated cert "Domain", the one that is a "Root certificate authority", Highlight and Export as .cer, email to all iOS devices, and click on the authority on the device. It should be entered as a trusted CA on all iOS devices. While you're at it, highlight and Export... as a .cer the certificate "IntermediateCA_SERVER.DOMAIN.COM_1", which is listed an an "Intermediate CA" -- you will use this to establish secure SSL connections with remote browsers hitting your server.]
    H. iOS on LAN: browse to server.domain.com/mydevices> [click on LHS Install trust cert, then RHS Enroll device.
    I. Test from web browser server.domain.com/mydevices: Lock Device to test
    J. ??? Profit
    12. Server Admin>DNS>Zones> Add convenient DNS alias records if necessary, e.g., mail.domain.com, smtp.domain.com, www.domain.com. If you want to refer to your box using the convenient shorthand "domain.com", you must enter the A record (NOT alias) "domain.com." FQDN pointing to the server's fixed IP. You can also enter the convenient short MX record "domain.com." with priority 11. This will all work on the LAN -- all these settings must be mirrored on the outside internet using the service from which you registered domain.com.
    You are now ready to begin turning on your services. Here are a few important details and gotchas setting up cloud services.
    Firewall
    Server Admin>Firewall>Services> Open up all ports needed by whichever services you want to run and set up your router (assuming that your server sits behind a router) to port forward these ports to your router's LAN IP. This is most a straightforward exercise in grepping for the correct ports on this page, but there are several jaw-droppingly undocumented omissions of crucial ports for Push Services and Device Enrollment. If you want to enroll your iOS devices, make sure port 1640 is open. If you want Push Notifications to work (you do), then ports 2195, 2196, 5218, and 5223 must be open. The Unix commands "lsof -i :5218" and "nmap -p 5218 server.domain.com" (nmap available from Macports after installing Xcode from the App Store) help show which ports are open.
    SSH
    Do this with strong security. Server.app to turn on remote logins (open port 22), but edit /etc/sshd_config to turn off root and password logins.
    PermitRootLogin no
    PasswordAuthentication no
    ChallengeResponseAuthentication no
    I'm note sure if toggling the Allow remote logins will load this config file or, run "sudo launchctl unload -w /System/Library/LaunchAgents/org.openbsd.ssh-agent.plist ; sudo launchctl load -w /System/Library/LaunchAgents/org.openbsd.ssh-agent.plist" to restart the server's ssh daemon.
    Then use ssh-keygen on remote client to generate public/private keys that can be used to remotely login to the server.
    client$ ssh-keygen -t rsa -b 2048 -C client_name
    [Securely copy ~/.ssh/id_rsa.pub from client to server.]
    server$ cat id_rsa.pub > ~/.ssh/known_hosts
    I also like DenyHosts, which emails detected ssh attacks to [email protected]. It's amazing how many ssh attacks there are on any open port 22. Not really an added security feature if you've turned off password logins, but good to monitor. Here's a Lion Server diff for the config file /usr/share/denyhosts:
    $ diff denyhosts.cfg-dist denyhosts.cfg
    12c12
    < SECURE_LOG = /var/log/secure
    > #SECURE_LOG = /var/log/secure
    22a23
    > SECURE_LOG = /var/log/secure.log
    34c35
    < HOSTS_DENY = /etc/hosts.deny
    > #HOSTS_DENY = /etc/hosts.deny
    40a42,44
    > #
    > # Mac OS X Lion Server
    > HOSTS_DENY = /private/etc/hosts.deny
    195c199
    < LOCK_FILE = /var/lock/subsys/denyhosts
    > #LOCK_FILE = /var/lock/subsys/denyhosts
    202a207,208
    > LOCK_FILE = /var/denyhosts/denyhosts.pid
    > #
    219c225
    < ADMIN_EMAIL =
    > ADMIN_EMAIL = [email protected]
    286c292
    < #SYSLOG_REPORT=YES
    > SYSLOG_REPORT=YES
    Network Accounts
    User Server.app to create your network accounts; do not use Workgroup Manager. If you use Workgroup Manager, as I did, then your accounts will not have email addresses specified and iCal Server WILL NOT COMPLETELY WORK. Well, at least collaboration through network accounts will be handled clunkily through email, not automatically as they should. If you create a network account using Workgroup Manager, then edit that account using Server.app to specify the email to which iCal invitations may be sent. Server.app doesn't say anything about this, but that's one thing that email address entry is used for. This still isn't quite solid on Lion Server, as my Open Directory logs on a freshly installed Lion Server are filled with errors that read:
    2011-12-12 15:05:52.425 EST - Module: SystemCache - Misconfiguration detected in hash 'Kerberos':
         User 'uname' (/LDAPv3/127.0.0.1) - ID 1031 - UUID 98B4DF30-09CF-42F1-6C31-9D55FE4A0812 - SID S-0-8-83-8930552043-0845248631-7065481045-9092
    Oh well.
    Email
    Email aliases are handled with the file /private/etc/postfix/aliases. Do something like this
    root:           myname
    admin:          myname
    sysadmin:       myname
    certadmin:      myname
    webmaster:      myname
    my_alternate:   myname
    Then run "sudo newaliases". If your ISP is Comcast or some other large provider, you probably must proxy your outgoing mail through their SMTP servers to avoid being blocked as a spammer (a lot of SMTP servers will block email from Comcast/whatever IP addresses that isn't sent by Comcast). Use Server.app>Mail to enter your account information. Even then, the Lion Server default setup may fail using this proxy. I had to do this with the file /private/etc/postfix/main.cf:
    cd /etc/postfix
    sudo cp ./main.cf ./main.cf.no_smtp_sasl_security_options
    sudo echo 'smtp_sasl_security_options = noanonymous' >> ./main.cf
    sudo serveradmin stop mail
    sudo serveradmin start mail
    Finally, make sure that you're running a blacklisting srevice yourself! Server Admin>Mail>Filter> Use spamhaus.org as a blacklister. Finally, set up mail to use strong Kerberos/MD5 settings under on Server Admin>Mail>Advanced. Turn off password and clear logins. The settings should be set to "Use" your SSL cert, NOT "Require". "Require" consistently breaks things for me.
    If you already installed the server's Trust Certificate as described above (and opened up the correct ports), email to your account should be pushed out to all clients.
    iCal Server
    Server.app>Calendar>Turn ON and Allow Email Invitations, Edit... . Whatever you do, do NOT enter your own email account information in this GUI. You must enter the account information for local user com.apple.calendarserver, and the password for this account, which is stored in the System keychain: Keychain Access>System> Item com.apple.servermgr_calendar. Double-click and Show Password, copy and paste into Server.app dialog. This is all described in depth here. If you enter your own account information here (DO NOT!), the iCal Server will delete all Emails in your Inbox just as soon as it reads them, exactly like it works for user com.apple.calendarserver. Believe me, you don't want to discover this "feature", which I expect will be more tightly controlled in some future update.
    Web
    The functionality of Server.app's Web management is pretty limited and awful, but a few changes to the file /etc/apache2/httpd.conf will give you a pretty capable and flexible web server, just one that you must manage by hand. Here's a diff for httpd.conf:
    $ diff httpd.conf.default httpd.conf
    95c95
    < #LoadModule ssl_module libexec/apache2/mod_ssl.so
    > LoadModule ssl_module libexec/apache2/mod_ssl.so
    111c111
    < #LoadModule php5_module libexec/apache2/libphp5.so
    > LoadModule php5_module libexec/apache2/libphp5.so
    139,140c139,140
    < #LoadModule auth_digest_apple_module libexec/apache2/mod_auth_digest_apple.so
    < #LoadModule encoding_module libexec/apache2/mod_encoding.so
    > LoadModule auth_digest_apple_module libexec/apache2/mod_auth_digest_apple.so
    > LoadModule encoding_module libexec/apache2/mod_encoding.so
    146c146
    < #LoadModule xsendfile_module libexec/apache2/mod_xsendfile.so
    > LoadModule xsendfile_module libexec/apache2/mod_xsendfile.so
    177c177
    < ServerAdmin [email protected]
    > ServerAdmin [email protected]
    186c186
    < #ServerName www.example.com:80
    > ServerName domain.com:443
    677a678,680
    > # Server-specific configuration
    > # sudo apachectl -D WEBSERVICE_ON -D MACOSXSERVER -k restart
    > Include /etc/apache2/mydomain/*.conf
    I did "sudo mkdir /etc/apache2/mydomain" and add specific config files for various web pages to host. For example, here's a config file that will host the entire contents of an EyeTV DVR, all password controlled with htdigest ("htdigest ~uname/.htdigest EyeTV uname"). Browsing to https://server.domain.com/eyetv points to /Users/uname/Sites/EyeTV, in which there's an index.php script that can read and display the EyeTV archive at https://server.domain.com/eyetv_archive. If you want Apache username accounts with twiddles as in https://server.domain.com/~uname, specify "UserDir Sites" in the configuration file.
    Alias /eyetv /Users/uname/Sites/EyeTV
    <Directory "/Users/uname/Sites/EyeTV">
        AuthType Digest
        AuthName "EyeTV"
        AuthUserFile /Users/uname/.htdigest
        AuthGroupFile /dev/null
        Require user uname
        Options Indexes MultiViews
        AllowOverride All
        Order allow,deny
        Allow from all
    </Directory>
    Alias /eyetv_archive "/Volumes/Macintosh HD2/Documents/EyeTV Archive"
    <Directory "/Volumes/Macintosh HD2/Documents/EyeTV Archive">
        AuthType Digest
        AuthName "EyeTV"
        AuthUserFile /Users/uname/.htdigest
        AuthGroupFile /dev/null
        Require user uname
        Options Indexes MultiViews
        AllowOverride All
        Order allow,deny
        Allow from all
    </Directory>
    I think you can turn Web off/on in Server.app to relaunch apached, or simply "sudo apachectl -D WEBSERVICE_ON -D MACOSXSERVER -k restart".
    Securely copy to all desired remote clients the file IntermediateCA_SERVER.DOMAIN.COM_1.cer, which you exported from System Keychain above. Add this certificate to your remote keychain and trust it, allowing secure connections between remote clients and your server. Also on remote clients: Firefox>Advanced>Encryption>View Certificates>Authorities>Import...> Import this certificate into your browser. Now there should be a secure connection to https://server.domain.com without any SSL warnings.
    One caveat is that there should be a nice way to establish secure SSL to https://domain.com and https://www.domain.com, but the automagically created SSL certificate only knows about server.domain.com. I attempted to follow this advice when I originally created the cert and add these additional domains (under "Subject Alternate Name Extension"), but the cert creation UI failed when I did this, so I just gave up. I hope that by the time these certs expire, someone posts some documentation on how to manage and change Lion Server SSL scripts AFTER the server has been promoted to an Open Directory Master. In the meantime, it would be much appreciated if anyone can post either how to add these additional domain names to the existing cert, or generate and/or sign a cert with a self-created Keychain Access root certificate authority. In my experience, any attempt to mess with the SSL certs automatically generated just breaks Lion Server.
    Finally, if you don't want a little Apple logo as your web page icon, create your own 16×16 PNG and copy it to the file /Library/Server/Web/Data/Sites/Default/favicon.ico. And request that all web-crawling robots go away with the file /Library/Server/Web/Data/Sites/Default/robots.txt:
    User-agent: *
    Disallow: /
    Misc
    VNC easily works with iOS devices -- use a good passphrase. Edit /System/Library/LaunchDaemons/org.postgresql.postgres.plist and set "listen_addresses=127.0.0.1" to allow PostgreSQL connections over localhost. I've also downloaded snort/base/swatch to build an intrusion detection system, and used Macports's squid+privoxy to build a privacy-enhanced ad-blocking proxy server.

    Privacy Enhancing Filtering Proxy and SSH Tunnel
    Lion Server comes with its own web proxy, but chaining Squid and Privoxy together provides a capable and effective web proxy that can block ads and malicious scripts, and conceal information used to track you around the web. I've posted a simple way to build and use a privacy enhancing web proxy here. While you're at it, configure your OS and browsers to block Adobe Flash cookies and block Flash access to your camera, microphone, and peer networks. Read this WSJ article series to understand how this impacts your privacy. If you configure it to allow use for anyone on your LAN, be sure to open up ports 3128, 8118, and 8123 on your firewall.
    If you've set up ssh and/or VPN as above, you can securely tunnel in to your proxy from anywhere. The syntax for ssh tunnels is a little obscure, so I wrote a little ssh tunnel script with a simpler flexible syntax. This script also allows secure tunnels to other services like VNC (port 5900). If you save this to a file ./ssht (and chmod a+x ./ssht), example syntax to establish an ssh tunnel through localhost:8080 (or, e.g., localhost:5901 for secure VNC Screen Sharing connects) looks like:
    $ ./ssht 8080:[email protected]:3128
    $ ./ssht 8080:alice@:
    $ ./ssht 8080:
    $ ./ssht 8018::8123
    $ ./ssht 5901::5900  [Use the address localhost:5901 for secure VNC connects using OS X's Screen Sharing or Chicken of the VNC (sudo port install cotvnc)]
    $ vi ./ssht
    #!/bin/sh
    # SSH tunnel to squid/whatever proxy: ssht [-p ssh_port] [localhost_port:][user_name@][ip_address][:remotehost][:remote_port]
    USERNAME_DEFAULT=username
    HOSTNAME_DEFAULT=domain.com
    SSHPORT_DEFAULT=22
    # SSH port forwarding specs, e.g. 8080:localhost:3128
    LOCALHOSTPORT_DEFAULT=8080      # Default is http proxy 8080
    REMOTEHOST_DEFAULT=localhost    # Default is localhost
    REMOTEPORT_DEFAULT=3128         # Default is Squid port
    # Parse ssh port and tunnel details if specified
    SSHPORT=$SSHPORT_DEFAULT
    TUNNEL_DETAILS=$LOCALHOSTPORT_DEFAULT:$USERNAME_DEFAULT@$HOSTNAME_DEFAULT:$REMOT EHOST_DEFAULT:$REMOTEPORT_DEFAULT
    while [ "$1" != "" ]
    do
      case $1
      in
        -p) shift;                  # -p option
            SSHPORT=$1;
            shift;;
         *) TUNNEL_DETAILS=$1;      # 1st argument option
            shift;;
      esac
    done
    # Get local and remote ports, username, and hostname from the command line argument: localhost_port:user_name@ip_address:remote_host:remote_port
    shopt -s extglob                        # needed for +(pattern) syntax; man sh
    LOCALHOSTPORT=$LOCALHOSTPORT_DEFAULT
    USERNAME=$USERNAME_DEFAULT
    HOSTNAME=$HOSTNAME_DEFAULT
    REMOTEHOST=$REMOTEHOST_DEFAULT
    REMOTEPORT=$REMOTEPORT_DEFAULT
    # LOCALHOSTPORT
    CDR=${TUNNEL_DETAILS#+([0-9]):}         # delete shortest leading +([0-9]):
    CAR=${TUNNEL_DETAILS%%$CDR}             # cut this string from TUNNEL_DETAILS
    CAR=${CAR%:}                            # delete :
    if [ "$CAR" != "" ]                     # leading or trailing port specified
    then
        LOCALHOSTPORT=$CAR
    fi
    TUNNEL_DETAILS=$CDR
    # REMOTEPORT
    CDR=${TUNNEL_DETAILS%:+([0-9])}         # delete shortest trailing :+([0-9])
    CAR=${TUNNEL_DETAILS##$CDR}             # cut this string from TUNNEL_DETAILS
    CAR=${CAR#:}                            # delete :
    if [ "$CAR" != "" ]                     # leading or trailing port specified
    then
        REMOTEPORT=$CAR
    fi
    TUNNEL_DETAILS=$CDR
    # REMOTEHOST
    CDR=${TUNNEL_DETAILS%:*}                # delete shortest trailing :*
    CAR=${TUNNEL_DETAILS##$CDR}             # cut this string from TUNNEL_DETAILS
    CAR=${CAR#:}                            # delete :
    if [ "$CAR" != "" ]                     # leading or trailing port specified
    then
        REMOTEHOST=$CAR
    fi
    TUNNEL_DETAILS=$CDR
    # USERNAME
    CDR=${TUNNEL_DETAILS#*@}                # delete shortest leading +([0-9]):
    CAR=${TUNNEL_DETAILS%%$CDR}             # cut this string from TUNNEL_DETAILS
    CAR=${CAR%@}                            # delete @
    if [ "$CAR" != "" ]                     # leading or trailing port specified
    then
        USERNAME=$CAR
    fi
    TUNNEL_DETAILS=$CDR
    # HOSTNAME
    HOSTNAME=$TUNNEL_DETAILS
    if [ "$HOSTNAME" == "" ]                # no hostname given
    then
        HOSTNAME=$HOSTNAME_DEFAULT
    fi
    ssh -p $SSHPORT -L $LOCALHOSTPORT:$REMOTEHOST:$REMOTEPORT -l $USERNAME $HOSTNAME -f -C -q -N \
        && echo "SSH tunnel established via $LOCALHOSTPORT:$REMOTEHOST:$REMOTEPORT\n\tto $USERNAME@$HOSTNAME:$SSHPORT." \
        || echo "SSH tunnel FAIL."

  • Which Linux Distro Works Out of the Box With the iMac late 2009 (11,1)?

    Hi. I use all 3 OSes because the other two OSes have tool and games that are not yet in OS X; best of both worlds. Win 8 on Bootcamp is nice for games and utilities but I'm installing Linux too on a separate external drive. I've tried a lot of Linux distros but they all have the bug that prevents ths iMac 4850 mobility GPU to work (you need a second monitor to solve it which I don't have the space for and I only use Linux every so often) but have you tried a Linux distro Live CD/DVD that works flawless on this Mac without editing commands in Linux's GRUB console on Linux bootup?
    If there's no distro that works out of the box, what's the closest distro that may only need a few adjustments on its boot menu (GUI preferably not console commands).
    But if there's a distro, what's the distro name and exact version (link to download it too if it's alright with you)?
    Thank you in advance.
    God bless.

    Hi, and thanks for you interest. The problems is that whether I'm using iMovie or FCE I get to a stage where the thumbnail image is present but if you try to play, import or any other action in either app it closes down and a message comes up " The Application Final Cut Express/iMovie quit unexpectedly - Mac OS X and other application are not affected" then asks if I wish to relaunch. I then hit the report to Apple button and afterwards relaunch. I was recommended to use Voltaic which I have tried, it worked but is to much mucking about for something that should work out of the box.
    This problem happens on both the iMAC and the MacBook so quite sure it's not a OS software issue. All software update are up to date also.
    Any ideas?

  • Oracle instant Client and unixODBC for Linux not work

    Hi experts,
    I have two Redhat EL 5. On the first Rehat(xxx.xxx.xxx.121 --> called Redhat1) I have installed Oracle 10g database server. On the second Redhat(xxx.xxx.xxx.123 --> called Redhat2) I want to connect to Oracle database server on xxx.xxx.xxx.121 via ODBC. But it does not work. Pls help me!
    I have done steps as following:
    Login to Redhat2 as root and type commands:
    1)Install Instant Client + sqlplus
    # rpm -ivh oracle-instantclient-basic-10.2.0.4-1.i386.rpm
    # rpm -ivh oracle-instantclient-sqlplus-10.2.0.4-1.i386.rpm
    2)Setting environment variable
    # LD_LIBRARY_PATH=/usr/lib/oracle/10.2.0.4/client/lib:${LD_LIBRARY_PATH}; export LD_LIBRARY_PATH
    # SQLPATH=/usr/lib/oracle/10.2.0.4/client/lib:${SQLPATH}; export SQLPATH
    3)Testing connection to Redhat1(Oracle DB server) using sqlplus
    # sqlplus abc/[email protected]:1521/lab2
    Connected.
    5)Begin to install unixODBC
    # rpm -ivh oracle-instantclient-odbc-10.2.0.4-1.i386.rpm
    # rpm -ivh unixODBC-2.2.11-7.1.i386.rpm
    # rpm -ivh unixODBC-devel-2.2.11-7.1.i386.rpm
    # rpm -ivh unixODBC-kde-2.2.11-7.1.i386.rpm
    6)After installation above packages I check for existing of odbc.ini and odbcinst.ini in /etc --> ok
    # ls /etc | grep odbc
    odbc.ini
    odbcinst.ini
    7) Tar unixODBC-2.2.14-linux-x86-32.tar.gz and copy file to /usr/local/bin, /usr/local/include, /usr/local/lib
    # tar -xzf unixODBC-2.2.14-linux-x86-32.tar.gz
    # ls /usr/local/bin/
    dltest isql iusql odbc_config odbcinst
    # ls /usr/local/include
    autotest.h odbcinstext.h odbcinst.h sqlext.h sql.h sqltypes.h sqlucode.h unixodbc_conf.h uodbc_extras.h uodbc_stats.h
    # ls /usr/local/lib
    libboundparam.la libgtrtst.la libodbccr.la libodbcinst.la libodbc.la
    libboundparam.so libgtrtst.so libodbccr.so libodbcinst.so libodbc.so
    libboundparam.so.1 libgtrtst.so.1 libodbccr.so.1 libodbcinst.so.1 libodbc.so.1
    libboundparam.so.1.0.0 libgtrtst.so.1.0.0 libodbccr.so.1.0.0 libodbcinst.so.1.0.0 libodbc.so.1.0.0
    # NLS_LANG=AMERICAN_AMERICA.UTF8; export NLS_LANG
    # TNS_ADMIN=/root; export TNS_ADMIN
    # ODBCINI=/etc/odbc.ini; export ODBCINI
    7)Retest sqlplus to Redhad1(Oracle database server) with local tnsname
    # sqlplus vonphoto/vonphoto@lab2
    SQL*Plus: Release 10.2.0.4.0 - Production on Sat Mar 27 03:20:55 2010
    Copyright (c) 1982, 2007, Oracle. All Rights Reserved.
    Connected to:
    Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - Production
    With the Partitioning, OLAP and Data Mining options
    8) Edit odbc.ini and odbcinst.ini
    ---odbcinst.ini
    # Included in the unixODBC package
    [Oracle 10g ODBC driver]
    Description = Oracle ODBC driver for Oracle 10g
    Driver = /usr/lib/oracle/10.2.0.4/client/lib/libsqora.so.10.1
    Setup =
    FileUsage =
    CPTimeout =
    CPReuse =
    ---odbc.ini
    [ora_dns]
    Driver = Oracle 10g ODBC driver
    DSN = ora_dns
    ServerName = xxx.xxx.xxx.121
    UserID = vonphoto
    Application Attributes = T
    Attributes = W
    BatchAutocommitMode = IfAllSuccessful
    BindAsFLOAT = F
    CloseCursor = F
    DisableDPM = F
    DisableMTS = T
    EXECSchemaOpt =
    EXECSyntax = T
    Failover = T
    FailoverDelay = 10
    FailoverRetryCount = 10
    FetchBufferSize = 64000
    ForceWCHAR = F
    Lobs = T
    Longs = T
    MetadataIdDefault = F
    QueryTimeout = T
    ResultSets = T
    SQLGetData extensions = F
    Translation DLL =
    Translation Option = 0
    DisableRULEHint = T
    TraceFile = /backup/sql.log
    Trace = Yes
    9)Testing the driver and the data source
    # odbcinst -q -d
    [Oracle 10g ODBC driver]
    # odbcinst -q -s
    [ora_dns]
    10) Test connection via ODBC from Redhat2(xxx.xxx.xxx.123) to Redhat1(xxx.xxx.xxx.121)
    # isql -v ora_dns
    isql: error while loading shared libraries: libreadline.so.3: cannot open shared object file: No such file or directory
    I have spent 4 days to search on the internet. But it still error.
    Pls help me.

    I don't understand your step 7 (the first step 7, actually).
    What is that unixODBC-2.2.14-linux-x86-32.tar.gz, where did it come from, and why are you doing all that?
    unixODBC should be installed after step 5.
    I guess that that is the cause of your problem.
    isql is not linked against readline at all on my RHEL 5 system.
    Do you notice any improvement after removing the files from that tar.bz file?
    Yours,
    Laurenz Albe

  • Https ssl config Oracle AS, webcache, portal...almost works

    Hi,
    I have searched the forums and I havent found anything that works for me.
    I have Oracle infrastructure on one server, and Oracle App server/portal on another server. I can get as far as the http server showing the "welcome to oracle" page in https form. When I try to access a page in the portal (plsql) I get a blank page. It does convert the "https://myserver:xxxx//pls/portal/url/page/IRWEB/HOME
    " to "https://myserver:xxxx/portal/page?_pageid=73,86254,73_86264:73_86316:73_8632...." but nothing comes up.
    Also, it uses the Infrastructure server for single-sign-on...so I need to make the app server do the single sign-on. I've tried by adding /pls/orasso entry in DADS.conf of http server..
    So as far as I can tell...the http server IS operating in https/ssl, but the single-sign-on and the pages in the portal are not.
    I have to do everything manually since I am using 10.1.2 (no Oracle Collab Suite installed, so no SSLConfigTool and other assistants)
    Here is what I've done to get https://myserver:xxxx/ to come up ok.
    server 1: Oracle Infrastructure and Oracle database release 1 10.1.2.0.0
    server 2: Oracle Application Server / Portal with webcache release 2 10.1.2
    using Oracle Wallet for certificate,
    http server -> process management "ssl-enabled",
    http server -> advanced -> ssl.config: SSLWallet file:, SSLWalletPassword, virtual host for ssl
    webcache -> added settings for ssl (I used the current entries for non-ssl as a guide for the ssl entries)
    Interesting issue...with the ports in the ssl.conf file example:
    Port 4459
    Listen 4459
    VirtualHose myserver.blah.edu:4450
    Port 4458
    When I get the blank page trying to use ssl and 4459, I can manually change the url in my browser to 4458 (or maybe its the other way around) and get this message: "Error: The portlet could not be contacted"
    Is this a problem with webcache? Do I have to do any ssl config on the server with the database?
    I've even tried disabling the webcache, both with the oracle sql script and through web interface but neither made a difference...same problem.
    Any help would be greatly appreciated..I feel as if I'm almost there.
    If I did not post enough info for accurate help, please ask what you need to know to provide help! Thanks in advance.

    Hi,
    Yes you can go for SSl configuration without re-installing any of the components.
    Regards,
    access_tammy

  • Applet fails in Linux but works on Windows and MAC

    Hey I've been testing my RMI Chat and everything seems to work fine when I connect to it from a MAC machine or Windows machine but when I try to connect on Linux (openSUSE) the applet gets a connection timeout.
    The applet will load initially but when it connects to the server, I get a connection timeout exception. The exception is:
    java.rmi.ServerException: RemoteException occurred in server thread; nested exception is:
         java.rmi.ConnectException: Connection refused to host: 192.168.1.103; nested exception is:
         java.net.ConnectException: Connection timed out: connect
         at sun.rmi.server.UnicastServerRef.dispatch(UnicastServerRef.java:325)
         at sun.rmi.transport.Transport$1.run(Transport.java:153)
         at java.security.AccessController.doPrivileged(Native Method)
         at sun.rmi.transport.Transport.serviceCall(Transport.java:149)
         at sun.rmi.transport.tcp.TCPTransport.handleMessages(TCPTransport.java:466)
         at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:707)
         at java.lang.Thread.run(Thread.java:595)
         at sun.rmi.transport.StreamRemoteCall.exceptionReceivedFromServer(StreamRemoteCall.java:247)
         at sun.rmi.transport.StreamRemoteCall.executeCall(StreamRemoteCall.java:223)
         at sun.rmi.server.UnicastRef.invoke(UnicastRef.java:126)
         at sun.rmi.server.ActivatableRef.invoke(ActivatableRef.java:124)
         at ds.rmi.server.ChatServerImpl_Stub.registerClient(Unknown Source)
         at ds.rmi.client.ClientUI.start2(ClientUI.java:360)
         at ds.rmi.client.ClientUI.register(ClientUI.java:282)
         at ds.rmi.client.ClientUI.start(ClientUI.java:334)
         at sun.applet.AppletPanel.run(AppletPanel.java:420)
         at java.lang.Thread.run(Thread.java:595)The address to connect to the Chat is: 192.168.1.102:8080/dschat and the 192.168.1.103 is the address for the linux machine.
    Has it got to do with the /etc/hosts?? I also have java.rmi.hostname set in the server class
    Thanks in advance for any help
    Brian

    Check to see if you can access your server from other machines over the internet using telnet. That is in command prompt go to the drive that has the OS. Say it is C:
    Then write:
    C:\>telnet <your servers external ip address> <port number that you are trying to access>
    If everything is fine you will get a blank window with the cursor blinking on the top left hand corner of the window.
    Generally this connection timed out exception occurs when the client can't find the server.

Maybe you are looking for