How to change LDAP server setting in Access Manager 6.2

Hi,
We have initially set authentication as a SunONE Directory Server 5.1 (master DS1) in Sun Java System Access Manager 6.2. In both /etc/opt/SUNWam/config/serverconfig.xml
/etc/opt/SUNWam/config/AMConfig.properties
conf files, DS1 was set initially. Also on console's Service Configuration ->LDAP->Primary LDAP Server was set as "DS1"
Now the problem is that I am not able to change the DS1 to the other master "DS2". I set DS2 in both above conf files and also the Service Configuration page as Primary LDAP Server. I restarted the server. When I stopped the DS1, I couldn't login access manager console with any user. It looks like it is still trying to get authentication from DS1.
Does anybody know what I am missing here?
Regards,

After hopeless tries, I finally made it work;) The trick was actually updating the sunKeyValue attribute of the entry:
"dn:ou=default,ou=OrganizationConfig,ou=1.0,ou=iPlanetAMAuthLDAPService,ou=ser
vices,dc=company,dc=com" in one of the master DS I have.
Even though I set DS2 and loadBalancer hosts in all conf files and in Primary LDAP conf in amconsole's Service Configuration, it just didn't work until I inserted loadBalancer host in sunKeyValue attribute.
Hope it helps to someone....
-Bora

Similar Messages

  • How to change default Server NFS version in Solaris 10 ?

    How to change default Server NFS version in Solaris 10 ?
    I need to change default version of NFS server version, currently i have NFS_SERVER_VERSMAX=2, for changing NFS version i changed this variable in /etc/default/nfs, but still its using version 2,
    Please let me know where else i need to change./
    Thanks a lot in advance!!!

    Did you change the /etc/default/nfs on the server or on the client?
    What is NFS_SERVER_VERSMIN set to? The NFS server is allowed to use any version in the span of NFS_SERVER_VERSMIN and NFS_SERVER_VERSMAX.
    NFS_SERVER_VERSMAX=4
    The default of NFS_SERVER_VERSMIN is 2.
    And, as mentioned, you will have to restart your NFS server for changes to take effect.
    .7/M.

  • How to change the Character Set from AL32UTF8 to WE8DEC

    Hello!!
    I want to know how to change the character set in the database from AL32UTF8 to WE8DEC.
    I tried to use the comand ALTER DATABASE CHARACTER SET but I got an error because WE8DEC is not a superset of AL32UTF8.
    I need to import tables from a server that uses WE8DEC. So when I do the import to my server, wich has AL32UTF8 , I can't import the rows that include an Ñ.
    So I want to change the caracter set to WE8DEC. How can I do it?
    Is it needed to change the language configuration? The remote server has AMERICAN_AMERICA, and my server has MEXICAN SPANISH_MEXICO (both uses text in spanish).
    Thanks a lot!!

    When you export from WE8DEC server what did you use
    for NLS_LANG char set? And when importing?
    The export was done in another computer because I can't do the export in the server (I have 10g, and the remote server has 9i and the export is not working). In my server, when I tried to do the import, the NS_LANG value was MEXICAN SPANISH_MEXICO.WE8MSWIN1252.
    When I try to import to my database I got the error:
    import done in WE8DEC character set and AL16UTF16 NCHAR character set
    import server uses AL32UTF8 character set (possible charset conversion)
    export client uses WE8MSWIN1252 character set (possible charset conversion)
    . importing USRMCR06's objects into PRIMARIZACION
    . . importing table "CHG_FONDOS_MARZO_CD_MOR"
    IMP-00019: row rejected due to ORACLE error 12899
    IMP-00003: ORACLE error 12899 encountered
    ORA-12899: value too large for column "PRIMARIZACION"."CHG_FONDOS_MARZO_CD_MOR".
    "NOMBRE" (actual: 41, maximum: 40)
    Column 1 16623436
    Column 2
    Column 3 Pymes_1
    Column 4

  • How to change ASE server name in windows

    how to change the server name in Adaptive server enterprise running on windows

    Windows is going to require a few more steps if ASE is running as a service.
    Update all registry entries containing <servername> with <newservername>:
    HKLM\SOFTWARE\SYBASE\Server
    HKLM\SYSTEM\CurrentControlSet\Services\SYBSQL_<servername>[ _BS | _XP ]
    NOTE: Doing a registry search on <servername> will bring up a ton of other locations, eg, legacy entries, ControlSet00X, etc ... not sure if all of these have to be changed, too ...
    NOTE: Haven't installed any of the latest ASE packages in windows so don't know if SAP's gone an changed the HKLM\SOFTWARE sub-branch name from SYBASE to SAP
    =========================
    In addition to Ryan's notes:
    - any other sysservers entries that refer to the old servername (eg, loopback)
    - any remote servers would need to update their external/remote logins, remote servers and/or proxy definitions ... as appropriate
    - if the ASE is involved in replication then you're looking at whole 'nother can of worms ... off the top of my head ... rs_databases, rs_idnames, rs_repdbs ... and of course any repdefs/subs that include the ASE name ?
    - obviously (?) any monitoring/maintenance/operational jobs ... documentation ...

  • How to change web server from inbuilt Tomcat to IIS in already configured Cold Fusion 10

    how to change web server from inbuilt Tomcat to IIS in already configured Cold Fusion 10

    You just need to run the Web Server Configuration Tool to connect ColdFusion to IIS.  It can be found in the ColdFusion program group off of the Start menu.  Be sure to run it "As Administrator".
    -Carl V.

  • How to determine LDAP server type

    Hello,
    Please post some hints how to determine LDAP server type(MS AD, OpenLDAP, Novell, Sun...) from rootDSE or somehow else?
    Thank you,
    Vladislav

    Hello Vladislav,
    the root DSE should be the best place to look for such
    things, I'd say. This is where an LDAP server advertises
    its capabilities. However, I'm not aware of an easy, fail-
    safe way of doing the distinguishing. One way, which would
    need some good logic, though, would be to go by supported
    OIDs, e.g. a SunONE DS 5.x will have attribute values like
    this in the rootDSE:
    supportedExtension=2.16.840.1.113730.3.5.3
    supportedExtension=2.16.840.1.113730.3.5.5
    (basically saying the DS supports it's own replication
    protocol). But it is quite feasible for other servers
    to support this protocol and thus advertise those OIDs
    in the rootDSE. Therefore you'd probably need to check your
    logic again and again for every new release of every known
    directory server.
    My 2 cents,
    Karl.

  • How to change the language setting in Adobe Flash CS6, from Chinese to English?

    How to change the language setting in Adobe Flash CS6, from Chinese to English?

    Unless you have a multilanguage serial/ installer,  you are on Creative Cloud or care to run through language swap you can't. Retail serial numbers are language specific and most Adobe apps cannot be coerced or switched on the fly since without the proper language resources installed, this won't work...
    Mylenium

  • How to change the account setting for App Store

    My last question wasn't so clear, so I would like to post again. I want to know how to change the account setting for App Store. I have changed in the Settings but it doesn't reflect in App Store.
    Thanks,

    once you sign out just click sign in and put the new email address in the "Username" field and your correct password then click OK
    it will look like it is doing nothing but give it time and it will sign you in with the new username.
    is it possible you have multiple itunes accounts?
    when you changed your itunes account from your me.com to your gmail.com address did you change it within the itunes Edit Account Info ('Store' menu then select 'View My Account', then sign in , select edit account info) or did you just create another itunes account?
    be well

  • How to check amsilent file in Sun Access manager patch or redeploying WAR's

    h1. How to check amsilent file in Sun Access manager patch or redeploying WAR's
    I had a hard time getting all the passwords correct, so I wrote a shell (bash) script that uses most passwords and other parameters in searches and queries. It let's you know before you start if a value is wrong. It does not change anything, only queries.
    h2. One pitfall I found ...
    during the postinstall of patch 05. I told Sun about it, but I suspect it was too late and is also an issue with patch 06:
    Look at the documentation regarding amconfig and the amsilent file:
    http://docs.sun.com/app/docs/doc/819-2137/adsav?l=en&q=amconfig&a=view
    Two problems that are clear to me now:
    1. ADMINPASSWD in practice, this password is used for cn=puser, not amadmin as it says. Perhaps there is something that makes them the same. It was the same for me, so it probably does not matter.
    2. AS81_ADMINPASSWD is not the same as ADMINPASSWD using either my definition or the document's definition. However, in the amsilent template, it is set like this, which I found is incorrect and the cause of my recent hair loss:
    <blockquote>AS81_ADMINPASSWD="$ADMINPASSWD"</blockquote>
    Also, this one if you use the web server:
    <blockquote>WL8_PASSWORD="$ADMINPASSWD"</blockquote>
    Delete the $ADMINPASSWD and replace it with the password for the app/web server.
    h2. The Script.
    It tests for the above problem, but I just realized it does not check $ADMINPASSWD. If that is set incorrectly in your amsilent, you'll get errors immediately from amconfig, so no big deal. If you make improvements, please post a reply!
    Paste this into a file named checkamsilent. LDAP and appserver must be running. It reads /opt/SUNWam/amsilent. Run it as root or use sudo:
    sudo ./checkamsilent
    #!/usr/bin/bash
            echo "This will test several important parameters of the amsilent file "
            echo "run this as root."
            echo "### read in the amsilent parameters"
            echo "source /opt/SUNWam/amsilent  "
    source /opt/SUNWam/amsilent
            echo "### look for the *server port* with LISTNER, otherwise it's not listening. "
            echo "netstat -a | grep $SERVER_PORT    "
            echo "--------------"
    netstat -a | grep $SERVER_PORT  
            echo "--------------"
            echo "."
            echo "### *admin port* with LISTNER, otherwise it's not listening. "
            echo "netstat -a | grep $ADMIN_PORT   "
            echo "--------------"
    netstat -a | grep $ADMIN_PORT 
            echo "--------------"
            echo "."
            echo "### Expect to see a line of XML, otherwise the SERVER_PORT is incorrect in the amsilent file."
            echo "grep $SERVER_PORT  ${AS81_INSTANCE_DIR}/config/domain.xml  "
            echo "--------------"
    grep $SERVER_PORT  ${AS81_INSTANCE_DIR}/config/domain.xml
            echo "--------------"
            echo "."
            echo "### Expect to see a line of XML, otherwise the ADMIN_PORT is incorrect in the amsilent file."
            echo "grep $ADMIN_PORT  ${AS81_INSTANCE_DIR}/config/domain.xml "
            echo "--------------"
    grep $ADMIN_PORT  ${AS81_INSTANCE_DIR}/config/domain.xml
            echo "--------------"
            echo "."
            echo "### bind as the directory manager "
            echo "ldapsearch -v -h $DS_HOST -p 3892  -L -s sub -D \"$DS_DIRMGRDN\" -w \"$DS_DIRMGRPASSWD\" -b 'dc=nsf, dc=gov' \"cn=amldapuser\"" 
    ldapsearch -v -h $DS_HOST -p 3892  -L -s sub -D "$DS_DIRMGRDN" -w "$DS_DIRMGRPASSWD" -b 'dc=nsf, dc=gov' "cn=amldapuser" 
            echo "."
            echo "### check the amldapuser password. "
            echo "ldapsearch -w $AMLDAPUSERPASSWD -v -h $DS_HOST -p 3892  -L -s sub -D cn=amldapuser,ou=DSAME Users,dc=nsf,dc=gov -b ou=DSAME Users,dc=nsf,dc=gov cn=* cn  "
    ldapsearch -w "$AMLDAPUSERPASSWD" -v -h $DS_HOST -p 3892  -L -s sub -D "cn=amldapuser,ou=DSAME Users,dc=nsf,dc=gov" -b "ou=DSAME Users,dc=nsf,dc=gov" cn=* cn
            echo "."
            echo "### check the app server admin: AS81_ADMIN password: AS81_ADMINPASSWD  and port: ADMIN_PORT "
         echo "### That's actually a bug in the template.  "
         echo "### Do not use AS81_ADMINPASSWD=\$ADMINPASSWD  Make sure they are  different passwords! Don\'t use the default!"
         echo "Expect to see a WARNING about --password option. "
            echo "/opt/SUNWappserver/appserver/bin/asadmin  list-http-listeners --user $AS81_ADMIN --port $ADMIN_PORT  -w $AS81_ADMINPASSWD  "
    /opt/SUNWappserver/appserver/bin/asadmin  list-http-listeners --user $AS81_ADMIN --port $ADMIN_PORT  -w "$AS81_ADMINPASSWD"
            echo "done!"

    I change the product machine from LG optimus to Samsung Galaxy but the file writing is not working, too.
    I copied the source code from Adobe website about FileStream  but it is needless too.
    -----------------program code------------------------
    import flash.filesystem.*;
    import flash.filesystem.FileStream;
    import flash.events.Event;
    //txtFld is a standard textField component
    txtFld.text = "Start";var file:File = new File();
    //btnSaveFile is a standard button component
    btnSaveFile.addEventListener(MouseEvent.CLICK,handlerBtnSaveFile);
    function handlerBtnSaveFile(e:Event){
    txtFld.text = "Pressed";
    file = File.documentsDirectory;
    file = file.resolvePath("test.txt");
    var fileStream:FileStream = new FileStream();
    fileStream.openAsync(file, FileMode.WRITE);
    fileStream.writeUTFBytes("Hello");
    txtFld.text = file.nativePath.toString();
    //fileStream.addEventListener(Event.CLOSE, fileClosed);
    fileStream.close();
    fcnFileName();
    function fcnFileName(){
    txtFld.text = file.name.toString();
    function fileClosed(event:Event):void {
        trace("closed");
    txtFld.text = "FileClosed";

  • How to protect custom applications using oracle access manager?

    Can someone brief me on how to protect custom applications using oracle access manager?

    Is the Custom application a Web Application running on certified platform? If its Web Application then its no different you have to configure the access policies with http(s) as resource type.
    If its not a web application you can write Custom access Gate and then implement. You would configure the policies similar to Web application (you can define your ouwn resource type if you like) and in the custom web gate you will use Access server SDK API to validate the access rules.
    Thanks
    Ram

  • Setting up Access Manager and Directory Server for Failover.

    I'm setting up 2 Access Managers AM1,AM2 and 2 Directory Servers DS1 and DS2 for failover. I've connected AM1 and AM2 to DS1. Suffixes of DS1 is replicated to DS2. Any change made to AM1 is replicated to AM2 as expected. I just patched AM1 with Access Manager patch 1 and the version information for AM1 shows 7.1 126359-01. I followed the same procedure to patch AM2 but AM2 still shows ver 7.1.
    How do I make sure both Access Managers are patched to the same version?
    I'm able to authenticate to one IIS6 site and authentication is passed on to Outlook Web Access on AM1 but when I shut down AM1 to test failover to AM2 OWA prompts me again for password. How do I resolve this?
    On AM1 http://host.domain/amserver/UI/Login?realm=sso successfully logs in but the same on AM2 gives Warning that "You have already logged in. Do you want to log out and then login to a different organization?"
    Please help !!!

    I'll answer what bits I can:
    Q: AM showing the same version?
    A: No idea on this one. I would have expected the operation you described to have produced the right answer. Check that neither your application server nor your web browser are caching old pages (ctrl-F5 in my browser)
    Q: How do I resolve re-authentication on failover?
    A: The AM documentation includes a deployment example that covers pretty closely what it is you are trying to achieve:
    http://docs.sun.com/app/docs/doc/820-2278
    Specifically, the problem you are describing is related to session failover. The sessions are stored in a local DB so when you failover the backup server does not store the same information and hence requires a reauthentication. The section of the above doc that deals with this is here:
    http://docs.sun.com/app/docs/doc/820-2278/gdsre?l=en&a=view
    Q: "You have already logged in" warning
    A: No idea. Sorry.
    R

  • How to change LACPDU timer setting on Microsoft Network Adapter Multiplexor Driver

    We’re installing our first Windows 2012 R2 server, and one of the network settings is different from what’s on a comparable Windows 2008 R2 server, and it's not what our network group would like to see connected to their switches.  Both servers have
    2 NICs teamed using the LACP protocol and are connected to 2 different switches for high availability.  In both cases I just teamed the NICs with whatever driver was on the server.
    On the 2008 R2 server (the one our network group likes), it’s an Intel driver, “Intel(R) Advanced Network Services Virtual Adapter”.  On the 2012 R2 server it’s a Microsoft driver, “Microsoft Network Adapter Multiplexor Driver”.  The setting that
    our network group is concerned about is the LACPDU timer setting.  Apparently it can be either “fast” or “slow”.  What they see on the switches is that on the 2008 Intel driver NICs the setting is “slow” and on the 2012 Microsoft driver NICs the
    setting is “fast”.  The switches are expecting “slow”.
    I spent some time searching on Microsoft.com and other places, as well as poking around on the server, but I couldn’t find that setting or how to change it on the Microsoft Network Adapter Multiplexor Driver.  Does anyone know how I can change it? 
    Thanks!

    Hi,
    According to my knowledge, we can’t change the value of LACP timer.
    Here is a related question,
    How to change LACP timer-value on Windows server 2012 Network Teaming, from short to long?
    http://social.technet.microsoft.com/Forums/en-US/05e2761f-e165-44f6-9bed-d91e9eeba687/how-to-change-lacp-timervalue-on-on-windows-server-2012-network-teaming-from-short-to-long
    Hope this helps.
    Steven Lee
    TechNet Community Support

  • How to change Report Server 10.1.2 from GMT to EST

    We have the 10.1.2 Oracle Application Server up and running but the time on the Report Server is GMT. How can the time be changed to EST? Oracle suggested changing a value in a parameter file and a Windows environment variable, neither of which worked. Now, they are saying reinstall the Web Server. Is there any other way? How is this set during the install?
    Thanks,
    Dave

    hi
    it was better if you created table first.
    now create table for your server name and use select into statment.
    and after this if any happend you will be able to change the server name easily by
    modifying table.
    hope this helps u.
    sarah

  • How to change password in pro to access my PC

    I changed my password in my pc which has my server and now I can't connect to the server from my macbook pro.  I can't remember how to change the password in my macbook pro so it matches the one from my pc so I can access the server.  Thanks

    If you already have a connection window with the name of the PC server in it, open it and use the disconnect and "Connect As" buttons, which will give you a chance to enter the new password.

  • How to change the QueryRowSet in early access 2?

    hi everybody,
    I do know how to change the query but I want to add a condition on a variable got from a text field, and use by button action.
    I don't know where to initialize this variable exactly?
    provided that the query is created in the session bean.
    please, reply as soon as possible.
    thanx.

    Hi,
    The tutorials under the section Access Databases will answer your question. In particular the tutorial "Using Databound Components to Access Databases". These tutorials can be found at:
    http://developers.sun.com/prodtech/javatools/jscreator/ea/jsc2/learning/tutorials/index.html
    Please post any further Creator 2 EA 2 related queries at:
    https://feedbackprograms.sun.com/login.html
    Cheers
    Giri

Maybe you are looking for

  • Report XML output fail to load into .RTF layout [EBS r12]

    Hi, In EBS r12, we have requirement to have a standard report output in excel. I got the report's xml output to create the xml template (.RTF layout) using BI Publisher. I created the .RTF layout and it works fine on my laptop using Bi Publisher.. th

  • How To Register/Sign Up For The Forum - Video

    You can search for available solutions in the Forum as much as you want. However, if you need to ask a question in the forum or answer to somebody's post, you need to be a member of the community. It is very easy to register in our Forum and the new

  • Restoring data from recovery DVD/RW's back onto my laptop.

    Compaq Presario CQ61-420US Windows 7 Home Premium-64 bit. I had to do a factory reset to get Windows running again. It crashed and would not reboot for an inknown reason (no new updates or software installed before crash). I created 9 DVD/RW Recovery

  • Update to iTunes 7.7 Release - Now I have a problem.

    I am curious if anyone is having this problem. I updated to iTunes 7.7 release today on my development system (a mistake as I have been chasing this now all evening). The problem I am having is that when I build my app for the device the app installs

  • IPod function on iPhone 3GS crashing since music purchase

    Hi, I have updated my iPhone 3GS with OS4 and after purchasing a new song in the iStore, the iPod function no longer works. When selecting the iPod app, the screen opens and then shuts down about two seconds later. I can no longer access my iTunes, p