How failover works with SunONE Directory Server?

Assume that I setup 2 masters using the multimaster scheme.
When 1 master fails/down, how do the client knows or get routed to the other master?

For full redundancy:
At the application level:
-redundant storage (raid, san,nas)
-multiple connectors to this storage (fiber,ethernet...)
-multiple LDAP servers (multimaster, replica's)
-multiple LDAP proxy servers
-redundant switches/routers (vrrp, ...)
-loadbalanced by redundant interconnected loadbalancers (level7)
All this helps in non persistant connections, if application are using connection pooling (for performance reasons), you have to verify the behaviour. Some applications only create this pool at start, but if the pool connections brake, it should reconnect.

Similar Messages

How to create users with i18n characters in SunONE directory server?

Was trying to create users and groups with i18n characters in SunONE directory server
1. Started LDAP console using -l option
2. Chaged the Locale to Japanese
3. Entered few japanese character as username (meaning internationalization user name)
4. However, I could not able to type the password using the "soft keyboard" that comes with Japanese Locale
5. to overcome with #4, for now, I typed english chars as the password
6. Click OK to save the above username/pwd
7. It says "netscape.ldap.LDAPException: error result (19); value of attribute "uid" contains extended (8-bit) characters"
Has anyone ever created i18n user names in SunONE Directory Provider? Please help...

Hi LostLad,
Soryy for my ignorance...Could you please be elaborate on how to remove "uid attribute from 7-bit ASCII plugin?
Thanks in advance..

How can iWeb hit counter be made to work with non-Apple server?

How can IWeb hit counter be made to work with non-Apple server?

This tutorial describes how to add an alternative counter to an iWeb page: iW05 - Adding a Graphical StatCounter as an HTML Snippet to an iWeb Page
OT

How to enable FIPS on sunone directory server 6.3?

Hi all,
My product needs FIPS certification.
As part of that we will be connecting to sunone directory server and use it as user store.
For that i need the steps to enable FIPS on sunone directory server 6.3.
Has any one done this before?
Please help me in this.
Thanks in advance.
Usha.

To enable the TLS Encryption Cipher
1. Check out the ssl-supported-ciphers property of the server.
$ dsconf set-server-prop -h host -p port ssl-cipher-family:cipher2 View the available SSL ciphers.
$ dsconf get-server-prop -h host -p port ssl-supported-ciphers
ssl-supported-ciphers :     TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
ssl-supported-ciphers :     TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
ssl-supported-ciphers :     TLS_DHE_RSA_WITH_AES_256_CBC_SHA
ssl-supported-ciphers :     TLS_DHE_DSS_WITH_AES_256_CBC_SHA
...Hope this helps,
-Shankar

JAAS LoginModule for SunOne Directory Server?

I have a customer who is using SunOne Directory Server for LDAP.
I have test code that uses the JAAS's com.sun.security.auth.module.JndiLoginModule to do authentication against an OpenLDAP test server.
The test code won't work at the customer site because they need to use a special userid/pw along with the subject userid/pw in order to do an authentication. I assume this is LDAP v3 stuff, but the customer is unsure. Unfortunately I have no direct access to the customer's LDAP admin folk. Typical bureaucracy stuff.
The customer was able to write java code that authenticates to his LDAP server using example code from http://java.sun.com/products/jndi/tutorial/ldap/security/ldap.html which uses the JNDI API and specifies the access userid/pw using Context.SECURITY_PRINCIPAL and Context.SECURITY_CREDENTIALS.
So thats great, however my application uses JAAS, and therfore only indirectly uses JNDI. The JndiLoginModule provided by JAAS does not appear to support the Context.SECURITY_PRINCIPAL and Context.SECURITY_CREDENTIALS parameters.
A custom JAAS LoginModule could be written which interfaces to the JNDI LDAP stuff, however considering that JAAS and the SunOne Directory server are both Sun products, I thought perhaps SunOne Directory comes with a JAAS compatible LoginModule that my customer does not know about? I've looked at online docs, but haven't found any such thing yet.

Hey dav,
Sorry that I am not posting to give you a solution - it is more to ask for some guidance.
I am implementing a client-server arch system which has a lot of 'privileged' actions to be managed. I have thus succesfully integrated the basics of JAAS in to the system... but I am now desparately looking for away to have client-side policies distributed at runtime from the server.
I do not want to get involved with any web/application server stuff more than I need to; unfortunately one of the system requirements is for client-server comms to be facilitated by SOAP over HTTP, and thus probably JAX-RPC - but it is no problem. I have a developed a database backed Policy and (JAAS) Config which constitute parts of the server component. Now it is just a case of getting the policy to the client at client start-up and subsequently the configuration forJAAS authentication. The aim is that this data will be transfered once during login, and anytime that the the policy is requested to be refreshed.
Since reading you post, I'm wondering what services LDAP or JNDI can offer me?
Also, is JNDI an appropriate option for data persistence? is it better to go with JDO or some other object store abstraction.
Kind regards,
Darren B

First time configuring Sol9 built-in SunONE Directory Server

Hi!
I'm using Solaris 9 Sparc and I'm trying to configure the SunONE Directory Server included with Sol9.
When I type :
directoryserver startconsole , it asks for :
UserID
Password
Administration URL
but how can I specify these info if it's a first time configuration ?

Because I have it on a Netra T1 AC200 without video card and I can't find the Directoryserver binary...

Automatic failover to an alternate Directory Server

We have two messaging server (Server A and Server B) running with independent LDAP server and replication is enabled between two.
In order to use automatic failover to an alternate Directory Server, I configured like this on Server A
configutil -o local.ugldaphost -v �serverA serverB�
Now to test the configuration I stopped the LDAP server on server A and run[b] imsimta test �rewrite-debug, it worked fine. But when I tried the authenticate user from pop3 or HTTP it came out with an error �Authentication Server is temporarily unavailable�
Any reason why it�s not doing the failover for HTTP, POP3 and IMAP authentication?

sorry I forget this
Sun Java(tm) System Messaging Server 6.1 HotFix 0.01 (built Jun 24 2004)
libimta.so 6.1 HotFix 0.01 (built 17:31:31, Jun 24 2004)
SunOS test.abc.com 5.9 Generic_112234-03 i86pc i386 i86pc

Instructions for OID to work with Netscape Directory

Where can I find instructions to give to a customer that shows step by step how to setup OID to work with Netscape Directory. Thank you.

Hi Sheree:
Make sure you check out our internal web site for OID. Lots of good information there about Directory Integration with other Server. If you have any questions after reading this let me know.
Thanks,
Jay
null

SunOne Directory server on AIX 5.3

Hello members,
I have a question for the technical team. I am tasked to install SunOne
directory server on AIX 5.3.
We have already installed SunOne on AIX 5.2 and it is proven that it works fine in our live environement however it is not yet tested on AIX 5.3.
I would like to know if SunOne 5.2 is supported by AIX 5.3 and if I should be aware any potential problems during installation.
Thanks,
G.S.

Hello,
Thanks Ludovic, I really appreciate info that you have provided.
I have now managed to install SunOne on AIX 5.3 and tried to create new instance from server group through SUNOne server console GUI.
But this gives me an error like below:
createSIE failed for ssDN=test.example.co.uk
The return code is:155Here is the sieEntry:
objectclass: netscapeserver,nsDirectoryServer,nsConfig
Has anybody ever delt with such an error?
Thanks,
G

Messenger Express: How do I add the Directory Server to the address book search tool?

In Messenger Express (ME) how do I add the Directory Server (DS) to the address book
search tool?
<P>
Edit the globals.pl file. Look for a line similar to: <BR>
@dirservers = ('MyCompany::phonebook.foo.com::o=FooCorp.,c=US','Four11 Directory::ldap.four11.com::');
<P>
Add an entry to the list. The list is comma delimited and each entry is a
string. The string contains three fields, delimited by a double colon (::). The
first field is the name you want to appear in the User Interface (UI). The second is
the hostname of the DS and the third is the Distinguished Name (DN) to use when searching.
<P>
Please note, Messenger Express is part of the Messaging Server. For more
information on Messenger Express, please see the release notes at
http://home.netscape.com/eng/server/MExpress/relnotes.htm

You can't add a new contact to specific group and there is no app for this. 3rd party apps don't have access to private iPhone APIs with security concerns being a primary reason, which such a function would require.

Change the User ID running the SunOne Directory Server 6.3 on Windows 2003

Hi Experts,
I have an install of SunOne Directory Server Enterprise edition 6.3 running on Windows 2003 server. It was installed using the Zip distribution and is running as a user ID in the Active Directory the server is part of. We are trying to change the user ID to a service account (not the current ID which belongs to a person), so that the Sun DS can run as a service within Windows 2003 server. Need help in doing this without having to re-install the Directory server. Has anyone done this and is it possible to do?

Thank you very much for the insights and the responses sharmy28.
Appreciate it very much.
All I had to do was change the setting in this file only:
Open the file dsee6/cacao_2/etc/cacao/instances/default/private/cacao.properties and change the below line with new id...
# Define username and groupname for cacao process
process.username=sunadmin
process.groupname=sungroup
As this is Windows 2003 and the installs are all default values, I had to reboot the server for the change to take effect.
The file dsee6/cacao_2/usr/lib/cacao/lib/tools/scripts/globals.cfg does not exist. However the same file exists under the perl directory as globals.pl and the settings you specified are present there. In our case these were commented out and so I left them as is.
Thanks once again for your responses which helped me solve the issue we had.
Thanks.

"Message Driven Bean" doesn't work with Sun App Server

Hello all,
i have a little bit problems, running a simple "Message Driven Bean" under the Sun App Server. The deployment of it works fine, but after starting the SUN App Server i get the following error message:
An error occurred during the message-driven beancontainer initialization at runtime. The most common cause for this is that the physical resource(e.g. Queue) from which the message-driven bean is consuming either does not exist or has been configured incorrectly. Another common error is that the message-driven bean implementation class does not correctly implement the required javax.ejb.MessageBean or MessageListener interfaces.
Has anybody a workaround for this problem?
The queue seems to be correctly installed. A simple client programm from the Sun Tutorial (Consumer & Producer) works fine without any Errors or Exceptions.
I am a little bit confused, because the queue seems to work with the client programms but not with a MDB running on the SUN App Server.
Thanks for you help!
Greetings
Manuel

Hello Mr Manuel!
could you plz help me with the steps for creating a message driven bean using netbeans ver 5.0(with Sun Java� System Application Server Platform Edition 8.2 )
I just know how to work with Session beans & Entity Bean, and am try to learn to work on Message Driven Beans too. there are no proper tutorials where i can find steps for creating these..
I need the steps from the scratch.,like creating QueueConnection Factory & Destination etc..
It will be gr8 if you can help me with this at the earliest .
Thank you
Bye

Integrating iPlanet Web Server 6.0 with SunOne App Server 7.0

I am experiencing problems integrating iPlanet Web Server 6.0 with SunOne App Server 7.0
My magnus.conf is
#ServerRoot /usr/iplanet/servers/https-test
ServerID https-test
ServerName sulev016.eur.gep.ge.com
ErrorLog /usr/iplanet/servers/https-test/logs/errors
PidLog /usr/iplanet/servers/https-test/logs/pid
User root
MtaHost localhost
DNS off
Security off
ClientLanguage en
AdminLanguage en
DefaultLanguage en
RqThrottle 128
StackSize 131072
CGIWaitPid on
TempDir /tmp/https-test-ab0d7966
Init fn=flex-init access="$accesslog" format.access="%Ses->client.ip% - %Req->vars.auth-user% [%SYSDATE%] \"%Req->reqpb.clf-request%\" %Req->srvhdrs.clf-status% %Req->srvhdrs.content-length%"
Init fn=load-types mime-types=mime.types
Init fn="load-modules" shlib="/usr/iplanet/servers/bin/https/lib/libNSServletPlugin.so" funcs="NSServletEarlyInit,NSServletLateInit,NSServletNameTrans,NSServletService" shlib_flags="(global|now)"
Init fn="NSServletEarlyInit" EarlyInit=yes
Init fn="NSServletLateInit" LateInit=yes
Init fn="load-modules" shlib="/usr/iplanet/servers/plugins/passthrough/bin/libpassthrough.so" funcs="init-passthrough,auth-passthrough,check-passthrough,service-passthrough" NativeThread="no"
Init fn="init-passthrough"
==========================================
my obj.conf is
<Object name=default>
NameTrans fn="assign-name" from="(/OMS|/OMS/*)" name="passthrough"
NameTrans fn="NSServletNameTrans" name="servlet"
NameTrans fn="pfx2dir" from="/servlet" dir="/usr/iplanet/servers/docs/servlet" name="ServletByExt"
NameTrans fn=pfx2dir from=/mc-icons dir="/usr/iplanet/servers/ns-icons" name="es-internal"
NameTrans fn="pfx2dir" from="/manual" dir="/usr/iplanet/servers/manual/https" name="es-internal"
NameTrans fn=document-root root="$docroot"
PathCheck fn=unix-uri-clean
PathCheck fn="check-acl" acl="default"
PathCheck fn=find-pathinfo
PathCheck fn=find-index index-names="index.html,home.html"
ObjectType fn=type-by-extension
ObjectType fn=force-type type=text/plain
Service type="magnus-internal/jsp" fn="NSServletService"
Service method=(GET|HEAD) type=magnus-internal/imagemap fn=imagemap
Service method=(GET|HEAD) type=magnus-internal/directory fn=index-common
Service method=(GET|HEAD) type=*~magnus-internal/* fn=send-file
AddLog fn=flex-log name="access"
</Object>
<Object name=cgi>
ObjectType fn=force-type type=magnus-internal/cgi
Service fn=send-cgi user="$user" group="$group" chroot="$chroot" dir="$dir" nice="$nice"
</Object>
<Object name="servlet">
ObjectType fn=force-type type=text/html
Service fn="NSServletService"
</Object>
<Object name="jsp092">
ObjectType fn="type-by-extension"
ObjectType fn="change-type" type="magnus-internal/jsp092" if-type="magnus-internal/jsp"
Service fn="NSServletService" type="magnus-internal/jsp092"
</Object>
<Object name="ServletByExt">
ObjectType fn=force-type type=magnus-internal/servlet
Service type="magnus-internal/servlet" fn="NSServletService"
</Object>
<Object name="es-internal">
PathCheck fn="check-acl" acl="es-internal"
</Object>
<Object name="passthrough">
ObjectType fn="force-type" type="magnus-internal/passthrough" Service type="magnus-internal/passthrough" fn="service-passthrough" servers="http://3.224.68.131:81"
Error reason="Bad Gateway" fn="send-error" uri="$docroot/badgateway.html"
</Object>
The requests are not passing through to the app server when i try to access it through port 80.
Presently I am testing my appln over port 81 on the app server.
Thanks and Regards
Vineet Guliani

Each ObjectType and Service directive should begin on a new line. You appear to have placed two directives on a single line.

How to work with framewok

Hi,
     I want to create a small program in Xcode which create a excel speedsheet with fiew sheet and put data into sheet using
     VisualBasicforApplication.framework.
     What can i do, so that i can create/write excel files in xcode on Mac OS X?
     Please help me as soon as possible.
Thanks

Originally Posted by skoltogyan
How to work with database in the Teaming ?
I need create some web-forms and store it in the database on the server.
Any example - how i can do this with Teaming ?
Please, Help me.
Serg
Hi Serg,
Not sure what you are looking for and I'm also no dev...
Maybe this link will help : Episode X: Teaming Templates | Novell User Communities

Does WLS 6.1 LDAP work with Active Directory?

I see in the security docs that Microsoft Site Server LDAP is supported. Anyone
know if it will work with Active Directory which is supposed to be LDAP v3 compatible?
TIA

I've done it with :
<CustomRealm
ConfigurationData="server.host=myLDAP.mydomain.org;membership.filter=(&
(member=%M)(objectclass=group));server.port=389;group.dn=ou=groupes,dc=myDomain.org;group.filter=(&(cn=%g)(objectclass=group));server.principal=cn=Administrator,cn=Users,dc=myDomain.org;user.dn=ou=Utilisateurs,dc=myDomain.org;user.filter=(&(cn=%u)(objectclass=person));server.ssl=false"
Name="MyLDAPv2" Notes="Test ldap V2 active Directory"
Password="myPassword" RealmClassName="weblogic.security.ldaprealmv2.LDAPRealm"/>
Will Spies <[email protected]> wrote:
Can you put up what a sample <CustomRealm/> tag for AD looks like? I'm
trying to get this to work with no success. Thanks for any help.

How failover works with SunONE Directory Server?

Similar Messages

Maybe you are looking for