How to encrypt password in Sun ONE directory server?

Hi,
I'm trying to perform an update to a password field in Sun ONE directory server using JNDI, but the stored password does not get encrypted by the directory server. I've searched the forum, and only found examples on how to do so for Active Directory. Please help.
Thanks

You didn't make mention of setting up ssl on the server side, so search these boards for openssl. Some nice person uploaded an nice example of how do use openssl to do this.
To get the ssl certs for the solaris-client ssl authentication ( tls:simple ) to work you will need to use netscape to connect to the ssl port to get the right format. There are comments in that same doc on how to do that.

Similar Messages

Help!! How to install and use Sun ONE Directory Server Resource Kit 5.2

Hi ! Friend:
I have some problem on install and use Sun ONE Directory Server Resource Kit 5.2, when I execute "java DSRK", afterwards something like this : com.iplanet.install.until.wbResource::gerstring:resource bundle"locale.resources.S1DSRKResource" not found appeared in the window ,that's why?
Meanwhile ,can you give some data about it on how to use it ?
Thank you !

You should be aware of the following characteristics of your directory when using this tool:
Size and number of entries.
Directory structure and access permissions.
Virtual attributes, class of service, and indexing.
Usage, types of access, and access patterns.
Post your error messages completely.
Thanks
--Britto

How to get certificate from sun one directory server

I have installed sun one directory server 5.2. Now in order to connect to the server through ldap protocol i need certificate on the client side.
How to get the certificate from the sun one directory server...??
( Earlier i tried the same procedure with active directory .and i got the certificate successfully ...as well as ldap authentication..but don't know what to do with the sun one..???)
Any tips on this issue will be helpful
thank you

You didn't make mention of setting up ssl on the server side, so search these boards for openssl. Some nice person uploaded an nice example of how do use openssl to do this.
To get the ssl certs for the solaris-client ssl authentication ( tls:simple ) to work you will need to use netscape to connect to the ssl port to get the right format. There are comments in that same doc on how to do that.

Install Sun ONE Directory Server 5,2 & how to use it for authenticate user

Good afternoon, Excuse, are newbie in the scope I am learning and putting desire to him, this in my situation I am trying to install Sun ONE Directory Server 5,2 since I understand that this it is application LDAP for Solaris, ok I want to install it to authenticate user against the system, that is to say, to be able to acces the server entering with a created user from the data base of LDAP and make think user that his created in the system. But the documentation that I finds indicates the installation of Sun ONE Directory Server 5,2 but it not clearly about how to use it for authentication. Some one have any manual step by step of Sun ONE Directory Server 5,2 installation and how to make it for authentication systems users.
I read the forum seeking for anwser and i get confuse
Thanks for the help and sorry for any inconvenient
Message was edited by:
Aku_28
Message was edited by:
Aku_28

I think that I found the Sun endorsed book locations for using LDAP accounts that don't use authentication besides "crypt". I now can use an account with a "ssha" password. It can be more than 8 characters long.
Chapter 14 System Administration Guide: Naming and Directory Services
Read page 201 which is the pam.conf file pam_ldap setups. I edited my "/etc/pam.conf" file to reflect this
Chapter 7 Directory Server 5.2 2005Q4 - Administration Guide
Read page 316-318 which has a graphical technique to specify password syntax. I set it up and then tried the password by running "su - brahms". It now requires a longer password than 8 characters and it is set up to use "ssha" for that UID entry "brahms".

How to migrate Sun One directory server to a new physical server install

need help
We have to move our existing installation of sun on directory server 5.2 to a new physical server.
We have a new physical server with a new host name. I am trying to find an easiest way to take a snapshot of our existing server and put it on a new installation
So will installing sun one directory server , its shows me two choices either to create a new instance or copy configuration from a existing server
What do i choose and which is the fastest route to replicate my old server
Thanks a bunch in advance
Sganb

Hi,
I'm glad you're still using the old, glorious Sun One Directory Server 5.2, because it brings me back a lot of memories... But are you seriously talking of the 'plain' version, with no patches/hot fixes on top? If that's the case, you're using of a software that has been developed in 2004 and released in Jan 2005! Just for you to be aware, in the last *8* (eight) years a considerable number (in the magnitude of 10^3) of bugs, security problems and performance issues has been identified and fixed...
However, to provide a better answer to your question, it would be important to understand the 'big picture' in terms of scenario and requirements:
1) Is this a critical 24x7 service for which you need to perform an on-line migration or you have a 'maintenance window' during which the service may be switched off?
2) Is the old server member of replication environment? If yes, how many masters/slaves do you have already? Shall the new server be part of this topology? What role shall it have?
3) Would it be possible to make the the old server able to communicate with the new server?
4) How big is the database that you've got to migrate? Do you have any requirement in terms of caches?
5) Do you take backups on a regularly basis and have in place working (*tested*) backup/restore procedures?
6) Is the new server conserving or changing the O.S. and architecture? [SPARC->SPARC, x86->x86, SPARC->x86, Solaris -> ? , 32 .vs. 64-bit? ]
7) What are the steps you did to 'install' the software on the new server?
Thanks,
Marco
P.S.: I don't wanna sound 'scaring' with all these questions, neither this should be intended as an 'hidden advertising' for Oracle Professional/Consulting Services, but the only way to not put in jeopardy your data is being aware of the risks, having the control of what's going on and ... possibly have a 'B' plan ;-)
P.S.S.: My last suggestion is to consider a migration to a later release AS SOON AS POSSIBLE; the latest is ODSEE 11.1.1.7, which is available here:
http://www.oracle.com/technetwork/middleware/downloads/oid-11g-161194.html
and seems to work pretty well ;-)

How can I import Openldap schema into sun one directory server?

Hello All
I have a schema which was written for openldap, and I want to import this schema into sun directory server. I found that some attribute syntaxes, like "NumericString", are not exist in sun directory server and some attribute definitions are also different. For example, the "internationaliSDNNumber" in sun directory is defined in "IA5String" syntax, but it is "NumericString" in openldap. Is there any effect on querying data from two different ldap server? How can I solve this problem?
Thank you!

http://directory.fedora.redhat.com/wiki/Howto:OpenLDAP
Migration
GaryThanks! But after I use some of scripts in that page, I got
"Unknown attribute syntax OID "1.3.6.1.4.1.1466.115.121.1.36"
It seems those scripts only transform schema file format, not the gap between different type(attribute syntax). Is it possible to import or add new type(attribute syntax) in sun one directory server?
Thanks.

How to create Roles along with Entitlements in Sun One Directory Server?

i need to create roles in sun one directory server along with entitlements
please help me in this regard

Hi Logeshr,
Is the issue with deploying the webjobsever resolved ? If yes, could you share the work around so that it can help others who has similar issues.
Most possible causes for the issue could be Problems with Problems with Parallel build using MSBuild or
HeatDirectory failure on TFS with MSBUILD error MSB4166: Child node “3” exited prematurely
However, as you said it works fine in Visual studio , ensure your CI server has all of the latest updates to MS Build. If you're not current, you'll get a build error when .targets file processes at the end of the buildsequence.
Regards,
Shirisha Paderu

Active Directory 2003 and Sun One Directory Server 5.2

I just installed Sun One Directory Server 5.2 on a Linux machine. I want to configure LDAP on that machine so that it can be authenticated on Active Directory 2003. How do I go about doing this?

Active Directory server is a "directory server" (and kerberos server.) If your linux client authenticates against Active Directory it doesn't have to involve the Sun Directory Server at all. You have several general approaches you could investigate:
1. Linux client gets accounts and and authentication via LDAP from Active Directory
If you use AD to handle unix LDAP authentication (opt 1) you may need to extend schema in AD to add the unix password field. I haven't tried it yet, but hope to.
2. Linux client gets accounts from AD LDAP and authorization from AD Kerberos.
There should be docs on support.microsoft.com on enabling kerberos support for non-Win clients.
3. Linux client (with samba client installed, with winbind or pam_smb to support unix level services) gets accounts and authentication as a "Windows" client from Active directory "Windows server"
Check the samba.org docn or forums- I think this is a pretty common solution.
4. Linux client gets account information from Sun Directory server but uses kerberos (against active directory) for authentication.
There should be docs on support.microsoft.com on enabling kerberos support for non-Win clients.
5 Linux client gets account and authorization from Sun Directory server, which the sun Directory server configured to use Active Directory as a Kerberos server.
Probably incredibly complex.

Page size limitation on Sun ONE directory server 5.2

Hi All,
How do i know what is the Page size limitation on Sun ONE directory server 5.2?
How do i cahnage it?
Best Regards,
Ayelet Regev
[email protected]

I enabled SSL in SUN ONE Directory Server 5.2, I use the following code to download the server certs,
     Hashtable env = new Hashtable(11);
     env.put(Context.INITIAL_CONTEXT_FACTORY,
     "com.sun.jndi.ldap.LdapCtxFactory");
     env.put(Context.PROVIDER_URL, "ldaps://bharatkumar.webm.webmethods.com:636/o=in");
     env.put(Context.SECURITY_AUTHENTICATION, "EXTERNAL");
     env.put(Context.SECURITY_PROTOCOL, "ssl");
     try {
     // Create initial context
     DirContext ctx = new InitialDirContext(env);
System.out.println(ctx.lookup("ou=web"));
ctx.close();
     } catch (NamingException e) {
     e.printStackTrace();
But it throws the following error:
javax.naming.CommunicationException: SASL bind failed: bharat.com:636 [Root exception is javax.net.ssl.SSLHandshakeException: sun.security.
validator.ValidatorException: PKIX path building failed: sun.security.provider.c
ertpath.SunCertPathBuilderException: unable to find valid certification path to
requested target]
at com.sun.jndi.ldap.LdapClient.authenticate(LdapClient.java:220)
at com.sun.jndi.ldap.LdapCtx.connect(LdapCtx.java:2637)
at com.sun.jndi.ldap.LdapCtx.<init>(LdapCtx.java:283)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(LdapCtxFactory.java:175)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(LdapCtxFactory.java:193
How to rectify the above error?
Kindly Help me.
Thanks,
Bharat

The interface close! Sun One Directory Server 5.2 sp6

Hello Everybody!
We have a really weird problem with Sun One Directory Server 5.2 sp6 on Windows Server 2003 Sp1 we dont know why, or how, but sometimes after a while working on the directory server console the interface suddenly closes! Does anybody know how to solve this problem?

Thanks,
Actually the file I need should be readable - I need to parse it later on. But I think I just found the answer in the development kit. The utility is called dbscan and it works directly on the database files.
Thanks again anyway,
Ayelet

Evaluation version of Sun One Directory Server 5.2

Dear sirs,
We downloaded the Sun One Directory Server 5.2 from the following site:
http://wwws.sun.com/software/download/products/3ee79e69.html
After studying the License Agreement I actually wonder how long this evaluation software stays operational? May I use this software for operational purposes after I required the necessary license?
I look forward to reading your comments.
With best regards,
Fred

The bits are the same.
Definitely before you move to deploy Directory Server in production, you'll want to work out licensing and support with Sun.
Mark

Backup of Sun ONE Directory Server 5.2

Hello,
I am new to Sun ONE Directory server and I installed a copy of version 5.2 on Windows 2000 server and want to ask for your help that how could I backup the LDAP server?
Since there is tool for backup of data but how could I recover if the server instance is failed?
Thanks in advanced.
Pat

Hi Pat,
If you are new to the Directory Server, then it is recommended to study the documentation ;-).
Chapter 4 of the Administrators Guide discusses the backup and restore procedures.
See: http://docs.sun.com/source/816-6698-10/populate.html
If you cannot start the directory server because the database is corrupted, then you may want to use the off-line restore tools (e.g. bak2db).
Before you do anything, study the above chapter.
Bertold

Domino R6 Sun ONE Directory Server 5.2 SSL Integration

We are trying to integrate Lotus Domino R6 server with the third party Sun ONE Directory Server 5.2.
We were successful in the integration without SSL.
Next we are trying to enable SSL communication between the two. We have configured the Certificates on both the servers. We get the following error on the Directory server (access logs).
[18/Jan/2005:16:57:14 +051800] conn=12903 op=-1 msgId=-1 - fd=161 slot=161 LDAPS
connection from 172.xx.xx.xxx to 172.xx.x.xx
[18/Jan/2005:16:57:14 +051800] conn=12903 op=-1 msgId=-1 - SSL error -8101 (Cert
ificate type not approved for application.); unauthenticated client CN=sun-dwc.xxxxxxxx
.com, OU=TCS, O=PGS, L=Bangalore, ST=Karnataka, C=IN; issuer CN=beTRUSTed M
achine CA - RSA Implementation, OU=beTRUSTed CAs, O=beTRUSTed
[18/Jan/2005:16:57:14 +051800] conn=12903 op=-1 msgId=-1 - closing - B1
[18/Jan/2005:16:57:14 +051800] conn=12903 op=-1 msgId=-1 - closed.
Can someone please help. Thanks.

Hi
We had the same exact problem.
The thing is that Domino uses SASL to authenticate against the LDAP directory as soon as the option "make this domain available to notes client & internet authentication" is checked in directory assistance.
A workaround is to disable client authentication on the encryption tab of the sun directory server, but this is not what we want.
Did you find another solution ?
Thanks
Yann

Sun One Directory Server 5.2 API

Hi all,
Is it possible to configure the password rules through Sun One Directory Server 5.2 API ?
regards,
Chinky

http://docs.sun.com/source/816-6700-10/aci.html

Migration of sun one directory server

Hello All,
There was sun one directory server is installed in windows server 2003..
unfortunately the machine got crashed, but we have the whole folder structure(MPS) in the hard disk.
Can any one help me how can i bring that server back with that files in another windows 2003 machine.
i.e how can i configure the files and start the server.
thanks in advance..
regards
Kishore

I don't know exactly how is it in Windows environments, but in Unix if you have the whole product directories you only ought to copy them to other machine in the same directories, same owner, same permissions and it should work. I'm talking about DSSE 6.x, I don't know if for previous versions that's possible.

How to encrypt password in Sun ONE directory server?

Similar Messages

Maybe you are looking for