Help! LDAPRealm and Site Server

We are going to implement security based on LDAP directory.
I must setup LDAPRealm using Site Server. According to Weblogic Service Pack 6, Sun's JNDI service provider doesn't work with Site Server (and it is not). I set-up Netscape's as was advised. The problem is that Weblogic can't find LdapContextFactory class file (which is part of Netscape's LDAPSP.jar) and LDAPRealm is not established. The same problem happens if I use Netscape directory instead of Site Server. But if I use Sun's provider and Netscape directory then LDAPRealm is established. This is how my StartWeblogic.cmd setup:
WEBLOGIC_CLASSPATH=.\license;.\classes;.\lib;.\lib\LDAPSP.jar; .\lib\ldapfilt.jar;.\lib\ldapjdk.jar;.\lib\weblogicaux.jar; .\myserver\serverclasses.
Ldapsp.jar file is in Weblogic's LIB folder along with other jar files. Weblogic sees all of them except Netscape's. I tried to put Netscape JARS in my JAVA_CLASSPATH as well. I used the same classpath to these libraries from a stand-alone client talking to directory server and it works fine.
Please help me to figure this out. Thank you, Boris
Here is a console message:
Unable to initialize server: weblogic.security.ldaprealm.LDAPException: could not get context - with nested exception: [java.lang.reflect.InvocationTargetException - with target exception: [javax.naming.NoInitialContextException: Cannot instantiate class: com.netscape.jndi.ldap.LdapContextFactory [Root exception is java.lang.ClassNotFoundException: com/netscape/jndi/ldap/LdapContextFactory ]]] fatal initialization exception weblogic.security.ldaprealm.LDAPException: could not get context - with nested exception: [java.lang.reflect.InvocationTargetException - with target exception: [javax.naming.NoInitialContextException: Cannot instantiate class: com.netscape.jndi.ldap.LdapContextFactory [Root exception is java.lang.ClassNotFoundException: com/netscape/jndi/ldap/LdapContextFactory ]]] at weblogic.security.ldaprealm.LDAPDelegate.getContext (LDAPDelegate.java:212) at weblogic.security.ldaprealm.LDAPDelegate.lookup (LDAPDelegate.java:232) at weblogic.security.ldaprealm.LDAPDelegate.search (LDAPDelegate.java:345) at weblogic.security.ldaprealm.LDAPDelegate.search(LDAPDelegate.java:354) at weblogic.security.ldaprealm.LDAPDelegate.getGroupMembers (LDAPDelegate.java:553) at weblogic.security.ldaprealm.LDAPDelegate.getGroup (LDAPDelegate.java:539) at weblogic.security.ldaprealm.LDAPDelegate.getGroup (LDAPDelegate.java:527) at weblogic.security.ldaprealm.LDAPRealm.getGroup (LDAPRealm.java:75) at weblogic.security.acl.CachingRealm.getGroup (CachingRealm.java:1420) at weblogic.security.acl.CachingRealm.getPrincipal (CachingRealm.java:1020) at weblogic.security.acl.CachingRealm.addPermission (CachingRealm.java:813) at weblogic.security.acl.CachingRealm.setupAcls (CachingRealm.java:802) at weblogic.security.acl.CachingRealm.<init> (CachingRealm.java:706) at weblogic.security.acl.CachingRealm.<init> (CachingRealm.java:564) at weblogic.t3.srvr.T3Srvr.initializeSecurity (T3Srvr.java:1750) at weblogic.t3.srvr.T3Srvr.start(T3Srvr.java:1086) at weblogic.t3.srvr.T3Srvr.main(T3Srvr.java:827) at java.lang.reflect.Method.invoke(Native Method) at weblogic.Server.startServerDynamically(Server.java:99) at weblogic.Server.main(Server.java:65) at weblogic.Server.main(Server.java:55)

Please try SP 8 for WLS 5.1. I believe that it contains a new LDAP realm
implementation
that fixes a number of different problems as well as provides enhanced
scaling and
performance. It also addresses problems with using Site Server and
OpenLDAP.
Paul Patrick
"Boris" <[email protected]> wrote in message
news:[email protected]...
>
We are going to implement security based on LDAP directory.
I must setup LDAPRealm using Site Server. According to Weblogic ServicePack 6, Sun's JNDI service provider doesn't work with Site Server (and it is
not). I set-up Netscape's as was advised. The problem is that Weblogic can't
find LdapContextFactory class file (which is part of Netscape's LDAPSP.jar)
and LDAPRealm is not established. The same problem happens if I use Netscape
directory instead of Site Server. But if I use Sun's provider and Netscape
directory then LDAPRealm is established. This is how my StartWeblogic.cmd
setup:
>
WEBLOGIC_CLASSPATH=.\license;.\classes;.\lib;.\lib\LDAPSP.jar;.\lib\ldapfilt.jar;.\lib\ldapjdk.jar;.\lib\weblogicaux.jar;
.\myserver\serverclasses.
>
Ldapsp.jar file is in Weblogic's LIB folder along with other jar files.Weblogic sees all of them except Netscape's. I tried to put Netscape JARS in
my JAVA_CLASSPATH as well. I used the same classpath to these libraries from
a stand-alone client talking to directory server and it works fine.
>
Please help me to figure this out. Thank you, Boris
Here is a console message:
Unable to initialize server: weblogic.security.ldaprealm.LDAPException:could not get context - with nested exception:
[java.lang.reflect.InvocationTargetException - with target exception:
[javax.naming.NoInitialContextException: Cannot instantiate class:
com.netscape.jndi.ldap.LdapContextFactory [Root exception is
java.lang.ClassNotFoundException:
com/netscape/jndi/ldap/LdapContextFactory ]]] fatal initialization exception
weblogic.security.ldaprealm.LDAPException: could not get context - with
nested exception: [java.lang.reflect.InvocationTargetException - with target
exception: [javax.naming.NoInitialContextException: Cannot instantiate
class: com.netscape.jndi.ldap.LdapContextFactory [Root exception is
java.lang.ClassNotFoundException:
com/netscape/jndi/ldap/LdapContextFactory ]]] at
weblogic.security.ldaprealm.LDAPDelegate.getContext (LDAPDelegate.java:212)
at weblogic.security.ldaprealm.LDAPDelegate.lookup (LDAPDelegate.java:232)
at weblogic.security.ldaprealm.LDAPDelegate.search (LDAPDelegate.java:345)
at weblogic.security.ldaprealm.LDAPDelegate.search(LDAPDelegate.java:354) at
weblogic.security.ldaprealm.LDAPDelegate.getGroupMembers
(LDAPDelegate.java:553) at weblogic.security.ldaprealm.LDAPDelegate.getGroup
(LDAPDelegate.java:539) at weblogic.security.ldaprealm.LDAPDelegate.getGroup
(LDAPDelegate.java:527) at weblogic.security.ldaprealm.LDAPRealm.getGroup
(LDAPRealm.java:75) at weblogic.security.acl.CachingRealm.getGroup
(CachingRealm.java:1420) at weblogic.security.acl.CachingRealm.getPrincipal
(CachingRealm.java:1020) at weblogic.security.acl.CachingRealm.addPermission
(CachingRealm.java:813) at weblogic.security.acl.CachingRealm.setupAcls
(CachingRealm.java:802) at weblogic.security.acl.CachingRealm.<init>
(CachingRealm.java:706) at weblogic.security.acl.CachingRealm.<init>
(CachingRealm.java:564) at weblogic.t3.srvr.T3Srvr.initializeSecurity
(T3Srvr.java:1750) at weblogic.t3.srvr.T3Srvr.start(T3Srvr.java:1086) at
weblogic.t3.srvr.T3Srvr.main(T3Srvr.java:827) at
java.lang.reflect.Method.invoke(Native Method) at
weblogic.Server.startServerDynamically(Server.java:99) at
weblogic.Server.main(Server.java:65) at weblogic.Server.main(Server.java:55)
>
>
>

Similar Messages

LDAPRealm and Microsoft Site Server (LDAP)

I have problem setting up the LDAPRealm in Weblogic Commerce 2.0.1 and
Personalisation Server connecting to a Microsoft Site Server.
The ldaprealm.properties file is as below:
weblogic.security.ldaprealm.url=ldap://localhost:389
weblogic.security.ldaprealm.principal=cn=Administrator
weblogic.security.ldaprealm.credential=password
weblogic.security.ldaprealm.ssl=false
weblogic.security.ldaprealm.authentication=none
weblogic.security.ldaprealm.userAuthentication=local
weblogic.security.ldaprealm.version=2
weblogic.security.ldaprealm.userDN=o=test, ou=Members
weblogic.security.ldaprealm.userNameAttribute=cn
weblogic.security.ldaprealm.userPasswordAttribute=userpassword
weblogic.security.ldaprealm.userCommonNameAttribute=cn
weblogic.security.ldaprealm.groupDN=o=test, ou=Groups
weblogic.security.ldaprealm.groupNameAttribute=cn
weblogic.security.ldaprealm.groupIsContext=true
weblogic.security.ldaprealm.groupUsernameAttribute=cn
The server runs and halts at the last line of log:
Fri Jul 28 11:58:21 GMT 2000:<I> <WebLogicServer> Server loading from
weblogic.class.path. EJB redeployment enabled.
Fri Jul 28 11:58:21 GMT 2000:<D> <CachingRealm> acl size = 211, pos ttl =60,
neg ttl = 10
Fri Jul 28 11:58:21 GMT 2000:<D> <CachingRealm> auth size = 211, pos ttl =
60, neg ttl = 10
Fri Jul 28 11:58:21 GMT 2000:<D> <CachingRealm> group size = 17, pos ttl =
600, neg ttl = 600
Fri Jul 28 11:58:21 GMT 2000:<D> <CachingRealm> perm size = 10000, pos ttl =
600, neg ttl = 600
Fri Jul 28 11:58:21 GMT 2000:<D> <CachingRealm> user size = 10000, pos ttl =
600, neg ttl = 600
Fri Jul 28 11:58:21 GMT 2000:<D> <CachingRealm> getAclOwner("weblogic")
Fri Jul 28 11:58:21 GMT 2000:<D> <CachingRealm> rewriting ACL
"weblogic.jdbc.connectionPool.commercePool"
Fri Jul 28 11:58:21 GMT 2000:<D> <CachingRealm> getPermission("reserve")
Fri Jul 28 11:58:21 GMT 2000:<D> <CachingRealm> perm: backup HAS reserve
Fri Jul 28 11:58:21 GMT 2000:<D> <CachingRealm> getPrincipal("everyone")
Fri Jul 28 11:58:21 GMT 2000:<D> <CachingRealm> getGroup("everyone")
Fri Jul 28 11:58:21 GMT 2000:<D> <LDAPRealm> getGroup("everyone")
Fri Jul 28 11:58:21 GMT 2000:<D> <LDAPRealm> search("o=telewest, ou=Groups,
cn=everyone", "cn", "*")
Fri Jul 28 11:58:21 GMT 2000:<D> <LDAPRealm> lookup("o=telewest, ou=Groups,
cn=everyone")
Fri Jul 28 11:58:21 GMT 2000:<D> <LDAPRealm> new JNDI context
The server halted at that line. Can anyone explain that situation?
We are sure that we could connect to the LDAP server since we have a JSP
page connecting to the LDAP using the SUN's jndi-ldap driver. Would that be
a LDAP version problem, if that is so, how could we set the
"java.naming.ldap.version=2" environment variable as I have said in my JSP
page.
Thanks for answering.

Yes, sorry by the mistake.
"ramesh" <[email protected]> wrote:
I think Johnny is trying to say : "If you change to SP9" or above...
Try to get a copy of the ldaprealm.properties file from the unzipped
SP8 and
above. It is self explanatory from there. The current ldaprealm.properties
which comes with WLS 5.1 and upto sp7 has been changed in SP8 and above.
Yes my configuration is also same as his.
Hope this helps.
Ramesh
"Johnny Valdez" <[email protected]> wrote in message
news:3b44ebb3$[email protected]..
I recommend you change your service pack to 9, because the 6 has someproblems
with LDAP...
if you change to sp6 you could use this
### Server type
server.alias=microsoft
### Microsoft Site Server
# This follows the default Microsoft Site Server (MSS) schema.
microsoft.server.host=ldapserver.example.com
microsoft.server.principal=cn=Administrator, ou=Members,o=ExampleMembershipDir
# microsoft.server.credential=*secret*
microsoft.user.dn=ou=Members, o=ExampleMembershipDir
microsoft.user.filter=(&(cn=%u)(objectclass=member))
microsoft.group.dn=ou=Groups, o=ExampleMembershipDir
microsoft.group.filter=(&(cn=%g)(objectclass=mgroup))
create a file ldaprealm.properties with this configuration and saveit
into the
Weblogic root directory.
greetings..
"Satya Ghattu" <[email protected]> wrote:
Hello,
I am trying to use an Microsoft site server as my LDAPRealm with weblogic
5.1 sp6, but in vain. Is there anybody out there who configured microsoft
site server with WLS sp6 and lesser? If yes, could you please post
your
configuaration properties?
Thank you,
-satya

LDAPRealm and Microsoft Site Server, server halting at start-up

I have problem setting up the LDAPRealm in Weblogic Commerce 2.0.1 and
Personalisation Server connecting to a Microsoft Site Server.
The ldaprealm.properties file is as below:
weblogic.security.ldaprealm.url=ldap://localhost:389
weblogic.security.ldaprealm.principal=cn=Administrator
weblogic.security.ldaprealm.credential=password
weblogic.security.ldaprealm.ssl=false
weblogic.security.ldaprealm.authentication=none
weblogic.security.ldaprealm.userAuthentication=local
weblogic.security.ldaprealm.version=2
weblogic.security.ldaprealm.userDN=o=test, ou=Members
weblogic.security.ldaprealm.userNameAttribute=cn
weblogic.security.ldaprealm.userPasswordAttribute=userpassword
weblogic.security.ldaprealm.userCommonNameAttribute=cn
weblogic.security.ldaprealm.groupDN=o=test, ou=Groups
weblogic.security.ldaprealm.groupNameAttribute=cn
weblogic.security.ldaprealm.groupIsContext=true
weblogic.security.ldaprealm.groupUsernameAttribute=cn
The server runs and halts at the last line of log:
Fri Jul 28 11:58:21 GMT 2000:<I> <WebLogicServer> Server loading from
weblogic.class.path. EJB redeployment enabled.
Fri Jul 28 11:58:21 GMT 2000:<D> <CachingRealm> acl size = 211, pos ttl =60,
neg ttl = 10
Fri Jul 28 11:58:21 GMT 2000:<D> <CachingRealm> auth size = 211, pos ttl =
60, neg ttl = 10
Fri Jul 28 11:58:21 GMT 2000:<D> <CachingRealm> group size = 17, pos ttl =
600, neg ttl = 600
Fri Jul 28 11:58:21 GMT 2000:<D> <CachingRealm> perm size = 10000, pos ttl =
600, neg ttl = 600
Fri Jul 28 11:58:21 GMT 2000:<D> <CachingRealm> user size = 10000, pos ttl =
600, neg ttl = 600
Fri Jul 28 11:58:21 GMT 2000:<D> <CachingRealm> getAclOwner("weblogic")
Fri Jul 28 11:58:21 GMT 2000:<D> <CachingRealm> rewriting ACL
"weblogic.jdbc.connectionPool.commercePool"
Fri Jul 28 11:58:21 GMT 2000:<D> <CachingRealm> getPermission("reserve")
Fri Jul 28 11:58:21 GMT 2000:<D> <CachingRealm> perm: backup HAS reserve
Fri Jul 28 11:58:21 GMT 2000:<D> <CachingRealm> getPrincipal("everyone")
Fri Jul 28 11:58:21 GMT 2000:<D> <CachingRealm> getGroup("everyone")
Fri Jul 28 11:58:21 GMT 2000:<D> <LDAPRealm> getGroup("everyone")
Fri Jul 28 11:58:21 GMT 2000:<D> <LDAPRealm> search("o=telewest, ou=Groups,
cn=everyone", "cn", "*")
Fri Jul 28 11:58:21 GMT 2000:<D> <LDAPRealm> lookup("o=telewest, ou=Groups,
cn=everyone")
Fri Jul 28 11:58:21 GMT 2000:<D> <LDAPRealm> new JNDI context
The server halted at that line. Can anyone explain that situation?
We are sure that we could connect to the LDAP server since we have a JSP
page connecting to the LDAP using the SUN's jndi-ldap driver. Would that be
a LDAP version problem, if that is so, how could we set the
"java.naming.ldap.version=2" environment variable as I have said in my JSP
page.
Thanks for answering.

Yes, sorry by the mistake.
"ramesh" <[email protected]> wrote:
I think Johnny is trying to say : "If you change to SP9" or above...
Try to get a copy of the ldaprealm.properties file from the unzipped
SP8 and
above. It is self explanatory from there. The current ldaprealm.properties
which comes with WLS 5.1 and upto sp7 has been changed in SP8 and above.
Yes my configuration is also same as his.
Hope this helps.
Ramesh
"Johnny Valdez" <[email protected]> wrote in message
news:3b44ebb3$[email protected]..
I recommend you change your service pack to 9, because the 6 has someproblems
with LDAP...
if you change to sp6 you could use this
### Server type
server.alias=microsoft
### Microsoft Site Server
# This follows the default Microsoft Site Server (MSS) schema.
microsoft.server.host=ldapserver.example.com
microsoft.server.principal=cn=Administrator, ou=Members,o=ExampleMembershipDir
# microsoft.server.credential=*secret*
microsoft.user.dn=ou=Members, o=ExampleMembershipDir
microsoft.user.filter=(&(cn=%u)(objectclass=member))
microsoft.group.dn=ou=Groups, o=ExampleMembershipDir
microsoft.group.filter=(&(cn=%g)(objectclass=mgroup))
create a file ldaprealm.properties with this configuration and saveit
into the
Weblogic root directory.
greetings..
"Satya Ghattu" <[email protected]> wrote:
Hello,
I am trying to use an Microsoft site server as my LDAPRealm with weblogic
5.1 sp6, but in vain. Is there anybody out there who configured microsoft
site server with WLS sp6 and lesser? If yes, could you please post
your
configuaration properties?
Thank you,
-satya

Remote and Testing Server Site Definitions

I am confused about what information I should put in my
remote site definition info and testing server FTC Host directory
text boxes. My host placed 3 directories: database, log, and www on
my server and Dreamweaver placed two directories, Connections and
_mmServerScripts in the same directory as the above 3. I have
placed all of my site files, including my home page and folders in
the www directory and my Access database in the database directory.
Dreamweaver placed the connection info in the Connections folder an
d _mmServerScripts in the same directory.
In order to construct my local site to match the remote site,
I created a www folder on my local site and placed all of my HTML
files and supporting folders in it.
From various Adobe Tech Notes I have read, I was led to
believe my FTP host directory
Should be www/. However, when I do this and create a new web
page on my local site and upload it to my remote site, Dreamweaver
creates a new www directory inside of the one my host created on
the remote site and uploads the file to it instead of placing it in
the www directory my host created. Also, when I use F12 to test my
page in my browser I get a 404 page not found because Dreamweaver
placed a www in the page URL that shouldn’t be there and
after I remove it I’m able to see my page in my browser. My
URL prefix on my testing server site definition is:
http://I.P.number.html.
What am I not doing right?
Should I use www/ as my FTP host directory or leave it blank?
Also, what should my URL prefix be?
Thanks for your help.

What you need to do is set up so that in the remote server
you point to the
www level on the server, and don't replicate this locally.
Paul Whitham
Certified Dreamweaver MX2004 Professional
Adobe Community Expert - Dreamweaver
Valleybiz Internet Design
www.valleybiz.net
"Jim_Moore" <[email protected]> wrote in
message
news:[email protected]...
>I am confused about what information I should put in my
remote site
>definition
> info and testing server FTC Host directory text boxes.
My host placed 3
> directories: database, log, and www on my server and
Dreamweaver placed
> two
> directories, Connections and _mmServerScripts in the
same directory as the
> above 3. I have placed all of my site files, including
my home page and
> folders
> in the www directory and my Access database in the
database directory.
> Dreamweaver placed the connection info in the
Connections folder an d
> _mmServerScripts in the same directory.
>
> In order to construct my local site to match the remote
site, I created a
> www
> folder on my local site and placed all of my HTML files
and supporting
> folders
> in it.
>
> From various Adobe Tech Notes I have read, I was led to
believe my FTP
> host
> directory
> Should be www/. However, when I do this and create a new
web page on my
> local
> site and upload it to my remote site, Dreamweaver
creates a new www
> directory
> inside of the one my host created on the remote site and
uploads the file
> to it
> instead of placing it in the www directory my host
created. Also, when I
> use
> F12 to test my page in my browser I get a 404 page not
found because
> Dreamweaver placed a www in the page URL that shouldn?t
be there and after
> I
> remove it I?m able to see my page in my browser. My URL
prefix on my
> testing
> server site definition is:
http://I.P.number.html.
>
> What am I not doing right?
> Should I use www/ as my FTP host directory or leave it
blank?
> Also, what should my URL prefix be?
>
> Thanks for your help.
>
>

Help Setting Up File and Web Server in OS 8.6

I have an OS 8.6 400mhz G3 B&W with 512mb RAM and an 80GB HD. It has the OEM operating system which is 8 on it. First I can't access the computer via afp from a Leopard Machine (Yes appletalk is enabled.). It gives me the error -36. Which is "The Finder can not complete the operation because some data in _____________ could not be read or written. I need this computer for a File and Web server. How could I make it accessible via AFP and FTP? I thought about linux but it requires a terminal like interface and I don't like that.

To begin with, have a look at the IV. Troubleshooting section of KB article 106461:
"Mac OS X 10.4 and later don't support Personal File Sharing (or other AFP) over Appletalk, though by initiating the connection from the opposite direction you could still achieve an IP connection from a Mac OS 8 computer to a sharing Mac OS X computer."
Regarding servers: There is a built-in web server in Mac OS 8.6 (see the help system for details). Alternatively, the (now) free NetPresenz could perhaps be of interest.
Jan

I need help authenticating my outgoing server settings in setting up my work email on my Galaxy S5. It says unable to authenticate or connect to server and I even called helpdesk at my email support and they tried every possible port (80, 25, 3535 or 465

I need help authenticating my outgoing server settings in setting up my work email on my Galaxy S5. It says unable to authenticate or connect to server and I even called helpdesk at my email support and they tried every possible port (80, 25, 3535 or 465 SSL) and none of them work. Please help!

You will need to get the required info to create/access the account with an email client from your school.
Are you currently accessing the account with an email client on your computer - if you have a Mac with the Mail.app, or if you have a PC with Outlook Express, etc.? If so, you can get the required account settings there.

Urgent help!!! Server java and midlet

Hi,
I have write a simple java server that run on a pc.
This waits for socket connection. I also write a midlet that connect cia socket connection to my server. The connection is established and the server say wellcome to my midlet and on the cell screen the message appears. After the midlet answers to the server hello but the server doesn't receive anything, nothing... I insert a println but the server stay blocked on the read on the DataInputStream. But the midlet says "I have send the message!"+answer.
If someone say me that I can post the code I do it, but it's a bit long.
Help!!!!!!

Yes, to be sure data is really send, you'll need to call flush, preferably on server and client. You can do this after every complete block of data, so not nedded after every write.

Help setting up Leopard Server(Standard) and VPN

Hello,
Here is my set up:
We have a static IP.
ADSL Netgear Router takes in the internet connection. (Not sure what the version is, but it had a VPN wizard).
Latest Aiport BS serves just the wireless.
Leopard Server in Standard Mode.
For the life of me I can't get the VPN working. I can't even make the server public. Granted I am out of my depth, but I am endeavoring to learn but there seems to be so many boxes to tick with servers that I never even know where I am up to.
On the 3 items in my setup above, what should the settings be starting to look like.
If I type our servers FQDN into Safari I am told that the server does not exist, but I can't work out how to make it available to the public. I am guessing that if I can't see the server via a browser then I am never going to be able to connect via VPN?
If you know of any other questions that I should be asking too, please let me know. My googling is getting me no where. I have even been doing the lynda.com tutorials on Leopard Server. So I promise that I am trying.

Hi
Perhaps if I broke it down in these two ways.
(a) There is nothing stopping you from using the built in Routing Services in Leopard Server. To make things clearer these 'Routing' Services would be VPN, Firewall, NAT, DHCP and possibly DNS. Basically and simply if your server (by that I mean the hardware you are using to be your server) has two ethernet ports and if your ISP supplied broadband service is by DSL Cable Modem then you don't need a 3rd-Party Router. You can simply connect the ethernet cable from your Cable Modem directly into one ethernet port (this would be the WAN/Public/External connection. The other ethernet port can be connected directly to your network switch/hub (switch would be better). This would be your LAN/Private/Internal connection. Running Gateway Assistant will help you configure the Server (simply to begin with) to 'share' the internet connection on your WAN port with any client computer configured to use your LAN port. It is NAT that basically fulfils this function. The Firewall Service will allow any request that comes from your 'trusted' LAN access to the Internet using the WAN port. Any 'untrusted' request trying to gain access to your LAN from the Internet is blocked by your Firewall unless you configure your Firewall to allow it through. The VPN Service along with the DHCP Service can be configured to allow trusted remote clients to access your Server as well as the private network as if that remote client was actually at your Server's location. Remote client access is achieved by simply keying in the fixed external IP Address that is used at your Server's location in Internet Connect as well as a name and password that is configured on the Server.
(b) You purchase a 3rd Party Router to this all for you and dispense with the built in tools on the Server. Simply configure the Router to allow VPN passthrough. There are 3 basic VPN connection methods: PPTP, L2TP and IPSec (ISKAMP). Each of them offer increasingly more secure methods. Depending on which method you finally decide on may mean using additional 'client' software not available as standard on the client OS.
Back to (a): If your internet connection is down a phone line then you would need to use an ADSL Modem Router anyway. For me it does not make much sense to connect the LAN side of this Router to your Server and to further configure the Server to do something the Router can already do for you in most cases better and simpler. Why complicate things trying to do this server side when by your own admission 'I am not getting it/anything'
There is some excellent advice on these forums regarding VPN have you searched for them? If you have and you are still struggling to understand this then perhaps it may be more beneficial as well as being cost effective to get a professional in to do this for you. You would benefit enormously as not only will you see how it gets done but you will also be able to ask questions that may make the whole concept of VPN and networking in general more understandable.
Hope this helps, Tony

Total newbie needs help installing and setting up Solaris 10 as a server

i'm attempting to set up one computer to act as a file and print server on my home network, so that i can store all of my music and video files on it instead and print to my parallel-only laser printer. 80% of the time i'm using my laptop, so i need the mass storage and printer to be handled by another device - the server!
i'm not sure if i'm even installing Solaris 10 correctly. how should it be installed to then act as a server? my two (incredibly long, like 3+ hours each) install attempts so far have resulted in an OS that looks like a nice fancy GUI-laden desktop which doesn't appear to show me my 750G SATA storage drive (the OS is on a 40G IDE drive).
in the end, i'd like to have the system working so that my only interaction with it is the power button - press it once to power it on and it'll boot up and long in automagically and make itself seen over the network (with printer and files stored on drives accessible to my laptop or any other PC that's on the same network), and then press the power button again to shut down the entire system gracefully (so far, when i press the power button, it's a quick kill like pulling the power cord - i'm pretty sure that's a bad way of having the system shut down, so how do i change it?)
i'm really hoping to use Solaris due to the promising ZFS scheme. my only exposure so far to unix / linux has been with ubuntu, which i usually like but sometimes loathe (primarily file permissions and network manager).

Let's try step by step rather than asking for setting up a server as a while and I'll try to help you as much as I can.
For setting up a printer, it's not that easy or quick setting up a printer on Solaris, I mean it's not like plug-n-play. Tell us about your printer and how it's connected to your system (usb, ethernet, parallel, serial).
As for shutting down the system, it's recommended to use the shutdown commnad like this:
# shutdown -y -i0 -g0
--gibb

Failed to provision site PWA with error: Microsoft.Office.Project.Server.Administration.ProvisionException: To create databases we need dbcreator and securityadmin server roles on servers.

I'm getting the following errors while trying to provision a PS 2010 PWA on our SharePoint 2010 farm. Our PS instance has been working for a while now, and houses two other PWAs. But today,
when trying to create this one, I get "Failed - see the Application event Log" and the following in the Event Viewer:
Log Name: Application
Source: Microsoft-SharePoint Products-Project Server
Date: 4/2/2014 2:09:08 PM
Event ID: 6980
Task Category: Provisioning
Level: Error
Keywords:
User: DOMAIN\DB_Access
Computer: server
Description:
Provisioning 'PWA/SDN': To create databases we need dbcreator and securityadmin server roles on servers 'DB1' and 'DB1'.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-SharePoint Products-Project Server" Guid="{b2178104-1b5b-4c20-8c8f-960678ced9e5}" />
<EventID>6980</EventID>
<Version>14</Version>
<Level>2</Level>
<Task>20</Task>
<Opcode>0</Opcode>
<Keywords>0x4000000000000000</Keywords>
<TimeCreated SystemTime="2014-04-02T19:09:08.225Z" />
<EventRecordID>1676727</EventRecordID>
<Correlation ActivityID="{90131653-B0A4-4FAF-A43C-7DF07CBC3332}" />
<Execution ProcessID="11040" ThreadID="12384" />
<Channel>Application</Channel>
<Computer>sharepoint</Computer>
<Security UserID="S-1-5-21-2280669542-4145173436-3058324265-4222" />
</System>
<EventData>
<Data Name="string0">PWA/SDN</Data>
<Data Name="string1">DB1</Data>
<Data Name="string2">DB1</Data>
</EventData>
</Event>
Log Name: Application
Source: Microsoft-SharePoint Products-Project Server
Date: 4/2/2014 2:09:08 PM
Event ID: 6993
Task Category: Provisioning
Level: Error
Keywords:
User: DOMAIN\DB_Access
Computer: sharepoint
Description:
Provisioning 'PWA/SDN': Failed to provision databases. An exception occurred: To create databases we need dbcreator and securityadmin server roles on servers..
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-SharePoint Products-Project Server" Guid="{b2178104-1b5b-4c20-8c8f-960678ced9e5}" />
<EventID>6993</EventID>
<Version>14</Version>
<Level>2</Level>
<Task>20</Task>
<Opcode>0</Opcode>
<Keywords>0x4000000000000000</Keywords>
<TimeCreated SystemTime="2014-04-02T19:09:08.225Z" />
<EventRecordID>1676728</EventRecordID>
<Correlation ActivityID="{90131653-B0A4-4FAF-A43C-7DF07CBC3332}" />
<Execution ProcessID="11040" ThreadID="12384" />
<Channel>Application</Channel>
<Computer>sharepoint</Computer>
<Security UserID="S-1-5-21-2280669542-4145173436-3058324265-4222" />
</System>
<EventData>
<Data Name="string0">PWA/SDN</Data>
<Data Name="string1">To create databases we need dbcreator and securityadmin server roles on servers.</Data>
</EventData>
</Event>
Log Name: Application
Source: Microsoft-SharePoint Products-Project Server
Date: 4/2/2014 2:09:08 PM
Event ID: 6958
Task Category: Provisioning
Level: Error
Keywords:
User: DOMAIN\DB_Access
Computer: sharepoint
Description:
Provisioning 'PWA/SDN': Database provisioning failed.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-SharePoint Products-Project Server" Guid="{b2178104-1b5b-4c20-8c8f-960678ced9e5}" />
<EventID>6958</EventID>
<Version>14</Version>
<Level>2</Level>
<Task>20</Task>
<Opcode>0</Opcode>
<Keywords>0x4000000000000000</Keywords>
<TimeCreated SystemTime="2014-04-02T19:09:08.225Z" />
<EventRecordID>1676729</EventRecordID>
<Correlation ActivityID="{90131653-B0A4-4FAF-A43C-7DF07CBC3332}" />
<Execution ProcessID="11040" ThreadID="12384" />
<Channel>Application</Channel>
<Computer>sharepoint</Computer>
<Security UserID="S-1-5-21-2280669542-4145173436-3058324265-4222" />
</System>
<EventData>
<Data Name="string0">PWA/SDN</Data>
</EventData>
</Event>
Log Name: Application
Source: Microsoft-SharePoint Products-Project Server
Date: 4/2/2014 2:09:08 PM
Event ID: 6971
Task Category: Provisioning
Level: Error
Keywords:
User: DOMAIN\DB_Access
Computer: sharepoint
Description:
Failed to provision site PWA/SDN with error: Microsoft.Office.Project.Server.Administration.ProvisionException: Failed to provision databases. ---> Microsoft.Office.Project.Server.Administration.ProvisionException: To create databases we need dbcreator and
securityadmin server roles on servers.
at Microsoft.Office.Project.Server.Administration.PsiServiceApplication.EnsureDatabases(ProjectProvisionSettings provset, SPSite pwaSite, String adminName, String adminEmail, ProjectDatabaseStateType& originalDatabaseState, Guid& adminGuid)
--- End of inner exception stack trace ---
at Microsoft.Office.Project.Server.Administration.PsiServiceApplication.EnsureDatabases(ProjectProvisionSettings provset, SPSite pwaSite, String adminName, String adminEmail, ProjectDatabaseStateType& originalDatabaseState, Guid& adminGuid)
at Microsoft.Office.Project.Server.Administration.PsiServiceApplication.CreateSite(ProjectProvisionSettings provset)
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-SharePoint Products-Project Server" Guid="{b2178104-1b5b-4c20-8c8f-960678ced9e5}" />
<EventID>6971</EventID>
<Version>14</Version>
<Level>2</Level>
<Task>20</Task>
<Opcode>0</Opcode>
<Keywords>0x4000000000000000</Keywords>
<TimeCreated SystemTime="2014-04-02T19:09:08.226Z" />
<EventRecordID>1676730</EventRecordID>
<Correlation ActivityID="{90131653-B0A4-4FAF-A43C-7DF07CBC3332}" />
<Execution ProcessID="11040" ThreadID="12384" />
<Channel>Application</Channel>
<Computer>sharepoint</Computer>
<Security UserID="S-1-5-21-2280669542-4145173436-3058324265-4222" />
</System>
<EventData>
<Data Name="string0">PWA/SDN</Data>
<Data Name="string1">Microsoft.Office.Project.Server.Administration.ProvisionException: Failed to provision databases. ---> Microsoft.Office.Project.Server.Administration.ProvisionException: To create databases we need dbcreator and securityadmin
server roles on servers.
at Microsoft.Office.Project.Server.Administration.PsiServiceApplication.EnsureDatabases(ProjectProvisionSettings provset, SPSite pwaSite, String adminName, String adminEmail, ProjectDatabaseStateType& originalDatabaseState, Guid& adminGuid)
--- End of inner exception stack trace ---
at Microsoft.Office.Project.Server.Administration.PsiServiceApplication.EnsureDatabases(ProjectProvisionSettings provset, SPSite pwaSite, String adminName, String adminEmail, ProjectDatabaseStateType& originalDatabaseState, Guid& adminGuid)
at Microsoft.Office.Project.Server.Administration.PsiServiceApplication.CreateSite(ProjectProvisionSettings provset)</Data>
</EventData>
</Event>
Anybody ever get any events like this before? I'm not finding much or nothing on Google or on other forums, so I thought I would run it past and see if anyone has experienced anything of a similar
nature. And yes, the farm account obviously has creator/secadmin permissions, at this point of our deployment....
I look forward to any and all feedback. Thanks and good afternoon!

I figured out the answer to this myself. For those few who might run into something akin to my error...
During the off-hours of where I work, I re-applied the farm account credentials to all dB server VM SQL services that had the account for a log-on (i.e., MSSQLSERVER, SQLSERVERAGENT, etc.) as well as all SharePoint services on our WFE/App Server VM (a two
server farm is what we host), in that order. Then I rebooted the dB server first, followed by the SharePoint server. Upon coming back, everything was working fine again. I was able to provision a site, no probelm, and it seemed to even be a little snappier
when doing so.
One note: doing this procedure gave me a "One or more services have started or stopped unexpectedly" error in the Health Analyzer, for the SPTimerV4 service. When you get this, simply enter into the item and click on "Reanalyze Now;" this will quickly clear
the error out of the Analyzer, and all should be right with the world! :)

Can we assign 2 IPs for a SCCM 2012 primary site server and use 1 IP for communicating with its 2 DPs and 2nd one for communicating with its upper hierarchy CAS which is in a different .Domain

Hi,
Can we assign 2 IPs for a SCCM 2012 primary site server and use 1 Ip for communicating with its 2 DPs and 2nd one for communicating with its upper hierarchy CAS . ?
Scenario: We are building 1 SCCM 2012 primary site and 2 DPs in one domain . In future this will attach to a CAS server which is in different domain. Can we assign 2 IPs in Primary site server , one IP will use to communicate with its 2 DPs and second
IP for communicating with the CAS server which is in a different domain.?
Details:
1)Server : Windows 2012 R2 Std , VM environment .2) SCCM : SCCM 2012 R2 .3)SQL: SQL 2012 Std
Thanks
Rajesh Vasudevan

First, it's not possible. You cannot attach a primary site to an existing CAS.
Primary sites in 2012 are *not* the same as primary sites in 2007 and a CAS is 2012 is completely different from a central primary site in 2007.
CASes cannot manage clients. Also, primary sites are *not* used for delegation in 2012. As Torsten points out, multiple primary sites are used for scale-out (in terms of client count) only. Placing primary sites for different organizational units provides
no functional differences but does add complexity, latency, and additional failure points.
Thus, as the others have pointed out, your premise for doing this is completely incorrect. What are your actual business goals?
As for the IP Addressing, that depends upon your networking infrastructure. There is no way to configure ConfigMgr to use different interfaces for different types of traffic. You could potentially manipulate the routing tables in Windows but that's asking
for trouble IMO.
Jason | http://blog.configmgrftw.com | @jasonsandys

VCM installation help needed on SQL DB and Reporting server

Hi All,
I'm new to VCM and now i got stuck at the SQL DB and Report server portion.
I'm running the vcm server on VM and the SQL is a physical server, both are sitting on the same LAN.
I have create the SQL DB but VCM just fail to validate the DB and report server.
I login to VCM using a Domain account for installation, and i tried to testing the DB using ODBC from the window, result fail.
Error message as attach.
I'm now totally lost on SQL portion.
My Question:
Is there any configuration needed on SQL DB?
How to get the reporting server to working?
What port is needed to it all working??
VCM server Ms Win2012.
SQL version 2012.
Many thanks to all who reply.

Hi Simonhoo79,
For SSRS, first check whether the report server link is accessible from your browser : "http://s01-fes-vcm1:80/ReportServer" . If you continue to get 404 error there also, then you need to reconfigure you report server first before proceeding to vcm installation. Follow the steps on below link on how to reconfigure report server using report services configuration Manager for 404 error.
http://social.msdn.microsoft.com/Forums/sqlserver/en-US/75910bcb-a879-4eb7-9757-acc45201fa3a/can-not-connect-to-reportserver-http-404-file-not-found?forum=sqlexpress
For SQL server ODBC connection,
Dont create ODBC connection for SQL Native Client. Create ODBC connection for SQL Server.
1. Open ODBC Data Source Administrator
2. Click User DSN tab and Click Add button.
3. Select SQL server and click finish
4. Give name and description and Give the SQL server name (with instance name if your using named instance) or IP in the Server text box.
5. Click Next and select either Windows authentication or sql authentication based on your SQL server authentication mode and click next.
6. If the details given are correct then it will proceed further and check "Change the dafault database to" to your VCM database
7. Click next and finish and try test data source.
VCM 5.7.2 and below will support installation only on windows server 2008 R2 and it doesn't support windows server 2012 but it support both 2008 and 2012 sql servers.

Using a custom certificate store for SCCM 2012 clients and primary site server

I have read what seems to be all the pki related documentation out there for SCCM 2012. I have a PKI infrastructure up and running issueing certificates with an offline root through group policy autoenrollment. The problem that i'm faced with is we are migrating
from SCCM 2007 that was in native mode and we chose not to use the CA that we used for the old SCCM environment. When the clients attempt to communicate with the M.P. it runs through all of the different certificates and adds a tremendous amount of overhead
to the M.P. We will have ten's of thousands of clients by migration end. Could someone please point me to a document that goes over how to leverage a custom certificate store that I could then tell the new 2012 environment to use? I know that it's in there,
I've seen it in the console. The setup is one primary site server with SQL on box and the pki I just mentioned as well as the old 2007 environment that is still live.
I read that you can try and use SAN as a method of identifying the new certs but I haven't found a good document covering exactly how that works. Any info you could provide I would be very grateful for. Thanks.

Jason, thank you for your reply. I'm getting the impression that you have never been in the situation where you had to deal with 2 different PKI environments. Let me state that I understand what your saying about trust. We have to configure the trusted root
CA via GPO. That simply isn't enough, and I have a valid example to backup this claim. When the new clients got the advertisement and began the ccmsetup process I used the /pki switch among others. What the client end up doing was selecting a certificate that
had the longest validity period which was issued by our old CA. It checked the authentication chain, found it to be valid and selected it for communication. At that point the installation failed, period, no caveats as you say. The reason the install failed
because the new PKI infrastructure is integrated into the new environment, and the old is not. So when you said " that
are trusted and they can use *any* cert that is trusted because at the end of the day, there is no
difference between two valid certs that have the same purpose as long as they are trusted. "
that is not correct. Both certs are trusted, and use the same certificate template, but only one certificate would allow the install to complete successfully.
Once I started using the CCMCERTISSUERS
switch the client install went swimmingly. The only reason I'm still debating this point is because someone might read this thread see your comments and assume "well I've got my new PKI configured as a trusted root CA, I should be all set" and their
deployment will fail, just as my pilot did.
About Intune I'm looking forward to doing a POC in the lab i built with my Note 3. I'm hoping it goes well as I really want to have our MDM migrated into ConfigMgr... I think the
biggest obstacle outside of selling it to management will be the actual device migration from the current MDM solution. From what I understand of the enrollment process manual install and config is the only path forward.
Thanks Jason for your post and discussion.

Upgrade Content Server and Site Studio

Hello Everyone,
We are trying to upgrade both Content Server and Site Studio from 7.1 / 7.2.1 to
10gR3
1) Instead of updating existing instance we Installed new 10gR3 instance
Exported folder structure archive, layout files and data files from old instance
2) Imported into new 10gR3 instance.
3) Tried to upgrade sitestudio websites
4) Its created a project file but not adding any SiteStudio section properties
(ex. primaryURL, secondaryURL, IncludeSectionInNavigation etc.), if I open the site in
designer, it shows just blank site structure without any templates associated and all sections are disabled.
Any ideas on this??
Venkat

Hi ,
If you are displaying the data from spaces only then all the operations like creating a web content , editing it etc can be done from Webcenter spaces itself .
Thanks
Srinath

Exchange Server 2013: Deploying High Availability and Site Resilience

Dear All,
I'm planning to Deploying High Availability and Site Resilience.
I have two data center and I have one exchange server on each site (multi-role).
I want to deploy Database Availability Group.
Is it possible? any idea?
in addition, all clients is connected to their email to their own site. dose it has any affected to Outlook users?
KH
[email protected]

Hi MAS,
Currently, I have only mailbox server and only database for each site.
+ Site1: I has DB1 and all users in site1 will access to their own site. (MBX1) subnet 192.168.1.0/24
+ Site2: I has DB2 and all users in site2 will access to their own site. (MBX2) subnet 192.168.2.0/24
But the email for incoming and outgoing with external will go to Site1.
In Planning,
I want to implement DAG to provide HA on database level below:
Is it possible to do that? dose it has any affected to current Outlook users?
BR,
KH
[email protected]

Help! LDAPRealm and Site Server

Similar Messages

Maybe you are looking for