IPlanet 4.1 SP9 - WL 6.1 SP2 - client certs

Hi,
We seem to have a problem with client certificates that are provided to our iPlanet
Webserver 4.1 SP9. Using WL 6.1 SP1, we used to following code to get the cert:
.. = request.getAttribute("javax.net.ssl.peer_certificates")
For some reason the exact same code will not work in SP2. We used the Jakarta SOAP
Tunnelgui to see how the request was formatted, and we saw this:
POST /login/logincertificaat.jsp HTTP/1.1
accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms-excel,
application/msword, application/vnd.ms-powerpoint, */*
referer:
https://<some URL>/login/logincertificate.jsp
accept-language: nl
content-type: application/x-www-form-urlencoded
connection: Keep-Alive
user-agent: Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0) host: some.host.com
content-length: 66
cache-control: no-cache
cookie: JSESSIONID=8F5a1R0P6eV1Nwg6lmAiFLJIhkG3MbULZQCeHmphDf4XAiMx76gZ!-1838370154!172190846!7005!7002
WL-Proxy-SSL: true
X-WebLogic-Force-Cookie: true
WL-Proxy-Client-Cert: MIIENDCCA96gAwIBAgIKTZeIPQAAAAAAKDANBgkqhkiG9w0BAQUFADCBjjEjMCEGCSqGSIb3DQEJARYUZS1zZXJ2aWNlc0BhY2htZWEubmwxCzAJBgNVBAYTAk5MMQwwCgYDVQQIEwNHTEQxEjAQBgNVBAcTCUFwZWxkb29ybjEPMA0GA1UEChMGQWNobWVhMRYwFAYDVQQLEw1IUyBlLVNlcnZpY2VzMQ8wDQYDVQQDEwZlLVNlcnYwHhcNMDIwMzIxMTUyNzIwWhcNMDMwMzIxMTUzNzIwWjCBoTEqMCgGCSqGSIb3DQEJARYbaGVyYmVydC5zY2h1dXJtYW5AYWNobWVhLm5sMQswCQYDVQQGEwJOTDEMMAoGA1UECBMDR0xEMRIwEAYDVQQHEwlBcGVsZG9vcm4xDzANBgNVBAoTBkFjaG1lYTEWMBQGA1UECxMNSFMgZS1TZXJ2aWNlczEbMBkGA1
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
1TZXJ2ghBqt8LP7t9wm0AGHT qvjplaMGUGA1UdHwReMFwwK6ApoCeGJWh0dHA6Ly9zbnRlYjAxMC9DZXJ0RW5yb2xsL2UtU2Vydi5jcmwwLaAroCmGJ2ZpbGU6Ly9cXHNudGViMDEwXENlcnRFbnJvbGxcZS1TZXJ2LmNybDCBiAYIKwYBBQUHAQEEfDB6MDoGCCsGAQUFBzAChi5odHRwOi8vc250ZWIwMTAvQ2VydEVucm9sbC9zbnRlYjAxMF9lLVNlcnYuY3J0MDwGCCsGAQUFBzAChjBmaWxlOi8vXFxzbnRlYjAxMFxDZXJ0RW5yb2xsXHNudGViMDEwX2UtU2Vydi5jcnQwDQYJKoZIhvcNAQEFBQADQQA3N3spt+Cv2oHG59WORpQik9JrKFTpHNKmFtRIp1GMJqTfjPutw9CJDqbCucFjJXiESW7qVeCr0WtHlBvxFzaz
Proxy-Client-IP: 1.1.1.27
X-Forwarded-For: 1.1.1.27
Proxy-Path-Translated: /login/logincertificate.jsp
Proxy-Remote-User: USer
Proxy-Auth-Type: ssl
Since it looks like the cert is stored in the header, we also tried code like
.. ... = request.Header("WL-Proxy-Client-Cert"); ...
and all the variations on the request/header and the keys, but to no avail.
Since everything worked in SP1, we are confused and hope someone can shine a light
on this issue.
Thanx in advance.
Marnix
P.S Sorry for the cross-posting of this issue (also in security) but I thought it
is more appropriate to post it here.

BEA provided the solution:
In the web.xml file, add the following node:
<context-param>
<param-name>weblogic.httpd.clientCertProxy</param-name>
<param-value>true</param-value>
</context-param>
This property is introduced in SP2 to patch security hole.
"Marnix J. van Wendel de Joode" <[email protected]> wrote:
>
Hi,
We seem to have a problem with client certificates that are provided to
our iPlanet
Webserver 4.1 SP9. Using WL 6.1 SP1, we used to following code to get the
cert:
... = request.getAttribute("javax.net.ssl.peer_certificates")
For some reason the exact same code will not work in SP2. We used the Jakarta
SOAP
Tunnelgui to see how the request was formatted, and we saw this:
POST /login/logincertificaat.jsp HTTP/1.1
accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms-excel,
application/msword, application/vnd.ms-powerpoint, */*
referer:
https://<some URL>/login/logincertificate.jsp
accept-language: nl
connection: Keep-Alive
user-agent: Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0) host: some.host.com
content-length: 66
cache-control: no-cache
cookie: JSESSIONID=8F5a1R0P6eV1Nwg6lmAiFLJIhkG3MbULZQCeHmphDf4XAiMx76gZ!-1838370154!172190846!7005!7002
WL-Proxy-SSL: true
X-WebLogic-Force-Cookie: true
WL-Proxy-Client-Cert: MIIENDCCA96gAwIBAgIKTZeIPQAAAAAAKDANBgkqhkiG9w0BAQUFADCBjjEjMCEGCSqGSIb3DQEJARYUZS1zZXJ2aWNlc0BhY2htZWEubmwxCzAJBgNVBAYTAk5MMQwwCgYDVQQIEwNHTEQxEjAQBgNVBAcTCUFwZWxkb29ybjEPMA0GA1UEChMGQWNobWVhMRYwFAYDVQQLEw1IUyBlLVNlcnZpY2VzMQ8wDQYDVQQDEwZlLVNlcnYwHhcNMDIwMzIxMTUyNzIwWhcNMDMwMzIxMTUzNzIwWjCBoTEqMCgGCSqGSIb3DQEJARYbaGVyYmVydC5zY2h1dXJtYW5AYWNobWVhLm5sMQswCQYDVQQGEwJOTDEMMAoGA1UECBMDR0xEMRIwEAYDVQQHEwlBcGVsZG9vcm4xDzANBgNVBAoTBkFjaG1lYTEWMBQGA1UECxMNSFMgZS1TZXJ2aWNlczEbMBkGA1
UEAxMSSGVyYmVydCBTY2h1dXJtYW5zMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAOf8cXepDBk7HAJiziImth2BTzdS7+uo+20859MAvkFXU07YdNSxUj9Ko6aW+KY02iju/k4FYHd0yX1kNgQeaMsCAwEAAaOCAgcwggIDMA4GA1UdDwEB/wQEAwIE8DATBgNVHSUEDDAKBggrBgEFBQcDAjAdBgNVHQ4EFgQUCz2UiUGlNraIqHu8cXxulD/Fmo8wgcoGA1UdIwSBwjCBv4AU30lTQ31VzMXGhfRM1shv2Q7HC9qhgZSkgZEwgY4xIzAhBgkqhkiG9w0BCQEWFGUtc2VydmljZXNAYWNobWVhLm5sMQswCQYDVQQGEwJOTDEMMAoGA1UECBMDR0xEMRIwEAYDVQQHEwlBcGVsZG9vcm4xDzANBgNVBAoTBkFjaG1lYTEWMBQGA1UECxMNSFMgZS1TZXJ2aWNlczEPMA0GA1UEAxMGZS
1TZXJ2ghBqt8LP7t9wm0AGHT qvjplaMGUGA1UdHwReMFwwK6ApoCeGJWh0dHA6Ly9zbnRlYjAxMC9DZXJ0RW5yb2xsL2UtU2Vydi5jcmwwLaAroCmGJ2ZpbGU6Ly9cXHNudGViMDEwXENlcnRFbnJvbGxcZS1TZXJ2LmNybDCBiAYIKwYBBQUHAQEEfDB6MDoGCCsGAQUFBzAChi5odHRwOi8vc250ZWIwMTAvQ2VydEVucm9sbC9zbnRlYjAxMF9lLVNlcnYuY3J0MDwGCCsGAQUFBzAChjBmaWxlOi8vXFxzbnRlYjAxMFxDZXJ0RW5yb2xsXHNudGViMDEwX2UtU2Vydi5jcnQwDQYJKoZIhvcNAQEFBQADQQA3N3spt+Cv2oHG59WORpQik9JrKFTpHNKmFtRIp1GMJqTfjPutw9CJDqbCucFjJXiESW7qVeCr0WtHlBvxFzaz
Proxy-Client-IP: 1.1.1.27
X-Forwarded-For: 1.1.1.27
Proxy-Path-Translated: /login/logincertificate.jsp
Proxy-Remote-User: USer
Proxy-Auth-Type: ssl
Since it looks like the cert is stored in the header, we also tried code
like
... ... = request.Header("WL-Proxy-Client-Cert"); ...
and all the variations on the request/header and the keys, but to no avail.
Since everything worked in SP1, we are confused and hope someone can shine
a light
on this issue.
Thanx in advance.
Marnix
P.S Sorry for the cross-posting of this issue (also in security) but I thought
it
is more appropriate to post it here.

Similar Messages

Iplanet 4.1 SP9 suports web.xml for using taglib ?

I try to make taglib work.
I use Iplanet 4.1 SP9.
I know I can do it with the jar file that include the TLD inside it.
But can I use a web.xml in it ?
My question : are we force to use the taglib.jar method ?
thanks
tony

Hi,
I hope below link will helps:
http://knowledgebase.iplanet.com/ikb/kb/articles/4585.html
Regards,
Dakshin.
Developer Technical Support
Sun Microsystems
http://www.sun.com/developers/support.

IPlanet 4.0 SP9 & SingleThreadModel

Hi:
We are developping a web server using iPlanet 4.0 SP9
and servlets. The server will server several users at
same time, for this reason, we are using the interface
SingleThreadModel, in order to avoid problems related to
the use of threads and multiple users.
But, this seems not to work properly. When two users are connected to our server, the second one must wait for
the first one. In other words, if the first user executes
an option that take a lot of time to be completed and
meantime the second user tries to use the web server, he
will wait until the first user's task was finished. The
web server looks like to be locked.
We are thinking about the iPlanet is misconfigured.
Any idea, remark, tip, etc.?
Thanks in advance.
Alberto

My advice - don't use SingleThreadModel. They shouldn't have provided this in the first place and here's why
3.2 Number of Instances
In the case of a servlet that implements the SingleThreadModel interface, the servlet container
may instantiate multiple instances of that servlet so that it can handle a heavy request load while
still serializing requests to a single instance.
3.2.1 Note about SingleThreadModel
The use of the SingleThreadModel interface guarantees that one thread at a time will execute
through a given servlet instance�s service method. It is important to note that this guarantee only
applies to servlet instance. Objects that can be accessible to more than one servlet instance at a
time, such as instances of HttpSession, may be available to multiple servlets, including those
that implement SingleThreadModel, at any particular time.
Here's a simple example: if you use a text file for storing/retrieving data and the server decides to instantiate another instance of your single threaded servlet - guess what's gonna happen?
Always use the normal multi-threaded servlets and develop them properly for multiple thread use.

JDBC persistence of session data not working on iPlanet Web Server, Enterprise Edition 6.0 SP2

I am using windows 2000.
iPlanet Web Server, Enterprise Edition 6.0 SP2
I tried to do jdbc persistence for sessiondata.
Somehow it didn't work.
I edited the JdbcStore code and added some system.outs in it.
From the logs I could note that
It is going into
JdbcStore.init(Properties config)//when the server starts up
JdbcStore.reap(long currentTime) //when the server is brought down
But it is not going into
JdbcStore.save(IWSHttpSession session)
JdbcStore.remove(IWSHttpSession session)
JdbcStore.load(IWSHttpSession session)
I did a "select count(*) from sessions" and it got me
no of rows=0.
The logs contained
[06/Mar/2002:11:25:09] info ( 552): IWSSessionManager: Maximum number of sessions is 1000
[06/Mar/2002:11:25:10] info ( 552): IWSSessionManager: Maximum number of sessions is 1000
[06/Mar/2002:11:25:14] info ( 552): JdbcStore: initialized with url=jdbc:odbc:LocalServer, driver=sun.jdbc.odbc.JdbcOdbcDriver
So I should think it was working.
The pages that are using HttpSession are working ok but should I not get some rows in my table "sessions" when I query?
This is the webapps.xml I used.
<?xml version="1.0" encoding="ISO-8859-1"?>

<!DOCTYPE vs PUBLIC "-//Sun Microsystems, Inc.; iPlanet//DTD Virtual Server Web Applications 6.0//EN" "http://developer.iplanet.com/webserver/dtds/iws-webapps_6_0.dtd">
<vs>


<session-manager
class='com.iplanet.server.http.session.IWSSessionManager' >
<init-param>
<param-name>maxSessions</param-name>
<param-value>1000</param-value>
</init-param>
<init-param>
<param-name>timeOut</param-name>
<param-value>1800</param-value>
</init-param>
<init-param>
<param-name>session-failover-enabled</param-name>
<param-value>true</param-value>
</init-param>
<init-param>
<param-name>reapInterval</param-name>
<param-value>600</param-value>
</init-param>
<init-param>
<param-name>session-data-store</param-name>
<param-value>com.iplanet.server.http.session.JdbcStore</param-value>
</init-param>
<init-param>
<param-name>url</param-name>
<param-value>jdbc:odbc:LocalServer</param-value>
</init-param>
<init-param>
<param-name>provider</param-name>
<param-value>sun.jdbc.odbc.JdbcOdbcDriver</param-value>
</init-param>
<init-param>
<param-name>username</param-name>
<param-value>sa</param-value>
</init-param>
<init-param>
<param-name>password</param-name>
<param-value>sa</param-value>
</init-param>
<init-param>
<param-name>lookupPool</param-name>
<param-value>4</param-value>
</init-param>
<init-param>
<param-name>insertPool</param-name>
<param-value>4</param-value>
</init-param>
<init-param>
<param-name>updatePool</param-name>
<param-value>4</param-value>
</init-param>
<init-param>
<param-name>deletePool</param-name>
<param-value>4</param-value>
</init-param>

</session-manager>
<session-tracking use-cookies="true" />


<web-app uri="/Web" dir="E:/iPlanet/Servers/docs" enable="true" >




</web-app>
</vs>

I'm trying to do the same thing with a file store, also somewhat unsuccessfully. However, one thing I can point out is that the manual says that the <session-manager> element should be within the <web-app> element in web-apps.xml. In your example, it is outside of it.

Configure Client-cert with ACL in iPlanet

I need to configure iPlanet with "client-cert" configuration.
- It works with this setting (in the console) : [Preference] --> [Encryption Preferences] --> "Require client certificates (regardless of access control):" set to "Yes".
- I have a problem with this setting because all the instance is affected and clients without a certificate can not use other applications under this instance (they receive an "Acces Denied page").
- It seems I can specify this setting to a specific URL via an ACL but it does not work.
- Could you confirm I can do that ? If yes, could you precise the configuration of the ACL ?
I am using iPlanet 4.1 under Solaris 2.8. For information I am using a websphere 4 server with iPlanet. My J2EE application is CLIENT-CERT; that's why I need this setting.
Thanks !

Hi Roman,
I'm afraid it's the expected behavior. You cannot use an ACL with object-groups inside a class-map.
Regards
Daniel

XP workstation services fail after 4.90 SP2 client imports

Testing for a migration from ZFD 3.2 to ZDM 6.5 on the workstation with the new Novell
Client 4.90 SP2.
Our core XP SP1 ghost image (not OEM) restores to a Compaq D530 without issue and has
Novell Client 4.83 SP2 with the ZFD 3.2 SP2 components (WM, RM and NAL NT services)
installed on it. Allow sysprep and the post-driver and services to run and install.
Reboot.
Login to eDirectory and install Novell Client 4.90 SP2 with NetIdentity 1.2.2 and ZFD 3.2
SP3 components (WM and RM, ZFD server is still ZFD 3.2 SP2). Reboot. Workstation is
quick and stable, logs in fine with 4.90 SP2.
Reboot again. Workstation initially appears to come up quickly then right around the time
NWGINA pops up services start to drag/fail and it'll take several minutes to get to the
point to actually enter my username and password. The enhanced GINA in SP2 detects
networking has failed and checks Workstation Only automatically. Eventually get in
Workstation Only. While the Explorer shell is responsive and appears stable, most
services have failed or are hung in the process of starting.
Stripping a box in this state of the most of its apps will bring it back close to its
original speed, but you're left with networking and in particular the TCP/IP Protocol
Driver "corrupt". As repair is not an option, I'm not aware of a way to remove and/or
reinstall TCP/IP.
I've tried Option^Explicit Software's WinSock XP Fix with no success.
Breaking down our ACU install of 4.90 SP2 into parts and testing points back to the
reinstall of Workstation Manager as the initiator.
Back-revving wm.exe, wmcchlpr.dll and wmpm.dll in the 4.90 SP2 install to the 4.83 SP2
(ZFD 3.2 SP2) level does not resolve.
I have a feeling that is has something to do with after the WM components registering with
the workstation and certain policies associating and coming down. But only three are
available at "Scheduler Service Startup". NAL Workstation Association Agent, NT Client
Configuration and Windows Group Policy. The Group policy is quite small and doesn't
affect system-level stuff.
Haven't yet tried toggling them off and see what affect disabling them has.
Aside from opening a service request, any idea or anywhere else I should be looking or
testing?
Ironically, I have the 4.90 SP2 client working without issue in this setup using HP's OEM
image for the D530.
Tony Pedretti
TransUnion LLC

A combination of recreating the ZENworks Group Policies using a Windows 2000 box for
reasons described in the previous posted TID and restoring wmgrppol.dll back to the build
shipped in 4.90 SP2 (3/4/2004) prevents the issue from reocurring.
I originally back-revved wmgrppol.dll to a test build (8/7/2002) Novell sent me prior to
4.83 SP2 to work around an issue where local policies are being removed after restarting a
workstation...
Local Group Policies are removed after updating to client updates in ZfD32SP1Client.exe
http://support.novell.com/cgi-bin/se...?/10079392.htm
Looks like I can't have my Group Policies and ZENworks working too. That is until I move
to 6.5. I hope.
Tony Pedretti
TransUnion LLC

Iplanet 6.x, NSAP & WLS 6.1 SP2

This is very strange. I can get NSAPI with iplanet 4.x to come up fine (everything proxies, etc. as it should). When we try to get iPlane 6.x working with NSAPI and WLS 6.1 SP2...nothing..doesn't work. We're running everything on Solaris.
Does anyone have or know of some good documentation that might describe how to get NSAPI working between WLS 6.1 and iPlanet 6...all the examples I've been seeing are mostly Windows paths, .dlls', etc. I'd love to see some working magnus.conf & obj.conf, etc. using WLS6.1 SP2 and iPlanet 6...we're not clustered and we're not using SSL (yet) so it's pretty vanilla.
What's blowing my mind is why iplanet 4.x works and 6.x doesn;t?? I wonder if the differences between the two are really that great. I checked BEA's doc...and like I said...it seemed a bit cryptic...someone told me ther was a typo or two regarding what was to go in magnus or was it obj.conf...I don't recall..it's just frustrating trying to get NSAPI up and running with WLS 6.1 SP2 and iPlanet 6. Any ideas? Thanks!!

Thanks Kumar. Does the syntax change (such as WebLogicCluster=xxxxxxxxxxxxxxx) if
we are running a single instance of WebLogic (a non-clustered environment)?
Thanks,
Doug
Kumar Allamraju <[email protected]> wrote:
In iplanet 6.x
magnus.conf should have
Init fn="load-modules" funcs="wl_proxy,wl_init" shlib=/usr/local/netscape/plugins/libproxy.so
Init fn="wl_init"
and obj.conf should have
<Object name="weblogic" ppath="*/weblogic/*">
Service fn=wl_proxy \
WebLogicCluster="myweblogic.com:7001,yourweblogic.com:7001,\
theirweblogic.com:7001" PathTrim="/weblogic"
</Object>
Pls post the exact errors that you are seeing, so that we can help
Kumar
"Doug E." wrote:
This is very strange. I can get NSAPI with iplanet 4.x to come up fine(everything proxies, etc. as it should). When we try to get iPlane 6.x
working with NSAPI and WLS 6.1 SP2...nothing..doesn't work. We're running
everything on Solaris.
Does anyone have or know of some good documentation that might describehow to get NSAPI working between WLS 6.1 and iPlanet 6...all the examples
I've been seeing are mostly Windows paths, .dlls', etc. I'd love to see
some working magnus.conf & obj.conf, etc. using WLS6.1 SP2 and iPlanet
6...we're not clustered and we're not using SSL (yet) so it's pretty vanilla.
What's blowing my mind is why iplanet 4.x works and 6.x doesn;t?? I wonderif the differences between the two are really that great. I checked BEA's
doc...and like I said...it seemed a bit cryptic...someone told me ther
was a typo or two regarding what was to go in magnus or was it obj.conf...I
don't recall..it's just frustrating trying to get NSAPI up and running
with WLS 6.1 SP2 and iPlanet 6. Any ideas? Thanks!!

What are the differences between iPlanet web servers, enterprise edition 4.1 sp2 and version 6.0

Hi,
The following are the features of iPlanet Web Server 6.0 which is enhanced from iPlanet Web Server 4.1 release.
You can implement sticky sessions by prefixing the name of the server host that generated the session to the JSESSIONID (the Servlets 2.2 API standard session cookie name). This enables the front-end load balancer to do sticky load balancing, such as forwarding future requests to the same host that generated the session.
Keep-alive handling now thousands of keep-alive connections can be maintained.
Added support for digest authentication as defined in RFC 2617. Digest authentication is used in conjunction with the iPlanet Directory Server 5.0 as an access authentication method that avoids passing the user name and password over the network in an unencrypted form.
Command Line Administration Tools.
Improved User Interface:-iPlanet Web Server 6.0 provides an improved user interface with the following features:
Magnus Editor ,Class Manager ,.htaccess Configuration
iPlanet Web Server currently provides support for Quality of Protection (QOP)= auth and algorithm = MD5 only.
iPlanet Web Server 6.0 features improved SSL performance and simplified server certificate acquisition from VeriSign.
In general, the authentication mechanisms provided by iPlanet Web Server 6.0, such as basic and digest authentication using LDAP, work across web applications (or servlet contexts). For FORM authentication, you can implement single sign-on using a cookie-based FORM login session created with a virtual-server-wide session manager. This FORM login session is available across all applications within the virtual server and is separate from the regular HTTP session which is limited to the servlet context
You can install iPlanet Web Server 6.0 on multiple machines using templatized installation.
Web Publishing is not supported in iPlanet Web Server 6.0.
Server-Side JavaScript (SSJS) /LiveWire is not supported in iPlanet Web Server 6.0.
Live Connect (LC) is not supported in iPlanet Web Server 6.0.
Regards
Selva

Solaris + iPlanet 6.0SP2 + PHP 5.1.2 + Instant Client

Configuration:
Solaris OS 5.8 (64bit)
iPlanet 6.0 (SP2) (32bit)
PHP v5.1.2 (32bit)
Instant Client 10.2.0.1 (32 bit)
I am able to compile and install php 5.1.2 and Instant Clinet 32bit libraris with my iPlanet Server. When i invoke a php script that contains oracle oci calls, the server processes them fine and at then restarts it selfs...
I see this in my server's error logs... basically its showing a crash in libclntsh.so.10.1 library....
==========================
[09/Mar/2006:10:20:56] failure (17398): Failed to read kernel statistics structures (No such device or address)
[09/Mar/2006:10:20:56] failure (17398): Failed to read kernel statistics structures (No such device or address)
[09/Mar/2006:10:20:57] failure (17398): Failed to read kernel statistics structures (No such device or address)
[09/Mar/2006:10:20:57] failure (17398): Failed to read kernel statistics structures (No such device or address)
[09/Mar/2006:10:20:57] catastrophe (17405): Server crash detected (signal SIGBUS)
[09/Mar/2006:10:20:57] info (17405): Crash occurred in NSAPI SAF php5_execute
[09/Mar/2006:10:20:57] info (17405): Crash occurred in function kohfrr from module /export/home/a297592/lib/oic/libclntsh.so.10.1
[09/Mar/2006:10:20:57] failure (17398): Child process admin thread is shutting down
[09/Mar/2006:10:20:57] failure (17398): Failed to read kernel statistics structures (No such device or address)
[09/Mar/2006:10:20:58] failure (17398): Failed to read kernel statistics structures (No such device or address)
[09/Mar/2006:10:20:58] failure (17398): Failed to read kernel statistics structures (No such device or address)
[09/Mar/2006:10:20:58] info (17408): Installing a new configuration
[09/Mar/2006:10:20:58] info (17408): [LS ls1] http://fidlabdev01.fmr.com, port 80 ready to accept requests
=======================================
If i try to use 64 bit libraries, my iPlanet server won't start saying libclntsh.so.10.1 wrong ELF class: ELFCLASS64 while loading the php.
I would very much appreciate if any one has any ideas to pass thru this
Thanks
Vijay

Configuration:
Solaris OS 5.8 (64bit)
iPlanet 6.0 (SP2) (32bit)
PHP v5.1.2 (32bit)
Instant Client 10.2.0.1 (32 bit)
I am able to compile and install php 5.1.2 and Instant Clinet 32bit libraris with my iPlanet Server. When i invoke a php script that contains oracle oci calls, the server processes them fine and at then restarts it selfs...
I see this in my server's error logs... basically its showing a crash in libclntsh.so.10.1 library....
==========================
[09/Mar/2006:10:20:56] failure (17398): Failed to read kernel statistics structures (No such device or address)
[09/Mar/2006:10:20:56] failure (17398): Failed to read kernel statistics structures (No such device or address)
[09/Mar/2006:10:20:57] failure (17398): Failed to read kernel statistics structures (No such device or address)
[09/Mar/2006:10:20:57] failure (17398): Failed to read kernel statistics structures (No such device or address)
[09/Mar/2006:10:20:57] catastrophe (17405): Server crash detected (signal SIGBUS)
[09/Mar/2006:10:20:57] info (17405): Crash occurred in NSAPI SAF php5_execute
[09/Mar/2006:10:20:57] info (17405): Crash occurred in function kohfrr from module /export/home/a297592/lib/oic/libclntsh.so.10.1
[09/Mar/2006:10:20:57] failure (17398): Child process admin thread is shutting down
[09/Mar/2006:10:20:57] failure (17398): Failed to read kernel statistics structures (No such device or address)
[09/Mar/2006:10:20:58] failure (17398): Failed to read kernel statistics structures (No such device or address)
[09/Mar/2006:10:20:58] failure (17398): Failed to read kernel statistics structures (No such device or address)
[09/Mar/2006:10:20:58] info (17408): Installing a new configuration
[09/Mar/2006:10:20:58] info (17408): [LS ls1] http://fidlabdev01.fmr.com, port 80 ready to accept requests
=======================================
If i try to use 64 bit libraries, my iPlanet server won't start saying libclntsh.so.10.1 wrong ELF class: ELFCLASS64 while loading the php.
I would very much appreciate if any one has any ideas to pass thru this
Thanks
Vijay

App-v 5.0 SP2 Client UI Virtual Application not launching

Hi there,
Currently we're upgrading to APP-V 5.0 SP2 (HF5). I downloaded the official APP-V Client UI from the Microsoft site. The Hotfix and App-V 5.0 SP2 installed succesfully, I even got Office 2013 to work with the new App-V Client.
The problem I have is that the APP-V Client UI is published to a user and when I launch the application the Process is started, I can see that in the taskmanager but there doesn't appear a user interface. It only worked once for me.
I've tried this on a few different machines, also removed user profile (local and network), but still the appvclientux process is starting but no UI is showing.
Does anyone have an idea how to fix this "bug".
Thanks!

Yes we have the latest roll-out of silverlight installed (locally).
I can't find the pre-req for Silverlight though:
Supported Operating System
Windows 7, Windows 8, Windows 8.1, Windows Server 2008 R2 SP1, Windows Server 2012, Windows Server 2012 R2
Microsoft APP-V Client 5.0 SP2 (and later):
Microsoft Windows 7 SP1 (x86, x64)
Microsoft Windows 8 (x86, x64)
Microsoft Windows 8.1 (x86, x64) and later
APP-V 5.0 Remote Desktop Client 5.0 SP2 (and later):
Microsoft Windows Server 2008 R2 SP1
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2 and later
Other Software:Microsoft Application Virtualization (5.0 SP2 and later) Client or Client for Remote Desktop Services

App-V 5 SP2 client attempting to find/create file in the package store (outside of the PVAD)

Hi all,
Hopefully I'm not missing something screamingly obvious here but I've been at this for a while and can't work out how to get around it.
I've got an app that I've sequenced (App-V 5 SP2) and can run from the sequencer with no issues but when I publish and run it on my client test box, I get a series of errors pointing to there being missing files. Fairly common scenario so I turn on procmon
and see what it's trying to do/find and see that it's looking for a file directly under C:\ProgramData\App-V\PackGUID\VersionGUID and failing because the file it's looking for isn't there (nor should it be) and is present where it should be; under the C:\ProgramData\App-V\PackGUID\VersionGUID\Root\
(which is the install directory).
If I modify the permissions on the "VersionGUID" directory and add the file to this location then the executable finds the file but fails because it's expecting to find the rest of the applications files from the installation directory in the same
location.
I've tried packaging to VFS, packaging and installing to PVAD with the same results. The only way that I could get it to launch was by setting the directories under the VFS to Merge with the local files system, deleting all files in the package under the
install directory and copying the same file structure onto the test machine (This isn't really a solution though as we're talking about over 500mb of files).
What tricks do you guys use when you come across these sorts of problems? Hopefully this all makes sense!
Thanks
DT

Deetts,
I plan on spending more time to see if I can get any better information, but a few interesting points so far.
The software seems to install a driver.
It is odd I only got the driver warning when I sequenced a second time and actually launched the software while in capture, but I have seen that before.
Also, the software ACLs the program files\client dir with some pretty interesting (stupid) permissions. It actually
REMOVES inheritance, and adds everyone full.
While this isn't a problem per se as under HF4 we can enable full VFS writes, it leads me to believe the software may be doing a lot of other bad practices, and it wouldn't surprise me if it assumed its own directory had full write rights to, and bombs if
it doesn't. Depending on how it determines its own dir may or may not be an issue. You will never have write access to the program data app-v dir, but you will under the VFS program files\client dir.
At any rate, I am going to spend a little more time with it, but just seeing what I have so far means it may not be the best candidate for App-V...but, don't ever let that deter you! We have completed many packages that were not ideal candidates with
great success.

IPlanet 6.0 SP6 compatibility with Oracle 11g Client in Windows server 2003

Hi All,
We have issues with our classic ASP application when connecting to Oracle 11g. Our application Database is migrating from oracle 10g to oracle 11g, with oracle 10g we don't have any issues but we are facing issues with Oracle 11g database
We are running iPlanet-WebServer-Enterprise/6.0SP6. And Chilisoft is Sun ONE ASP 4.0 (formerly known as Chili!Soft ASP) on windows 2003 machine for running ASP application.
The connection we are trying is
Provider=OraOLEDB.Oracle; Data Source=xxxx;User Id=xxx;Password=xxx;
The error we are getting is "OraOLEDB error '80004005' "
Question: Is iPlanet-WebServer-Enterprise/6.0SP6. And Chilisoft is Sun ONE ASP 4.0 is compatible with Oracle Client 11g in Windows 32 bit machine
Appreciate your quick response
Thanks,
Murthy

I have the same situation. Could you please share your experience if you resolve it? Thanks.

WSUS SP2 Client Systems are not detecting Updates,

I have a WSUS SP2 (with WSUS-KB2720211-x64) running on Windows 2008 R2. The WSUS site is running on custom site port 8530.
All the clients are reporting without any issues. However the approved patches are not getting detected on the clients.
From the client I can get cab file by accessing http://WSUSServerName:8530/iuident.cab
Network connectivity OR firewall issue is ruled out. Also the client system are updating the update agent to
7.6 from WSUS. I am sure the approved patches are needed on the client PC's, the WSUS report for a particular approved patch too says that the approved patch is needed.
Please find the following WIndowsUpdate log from the client PC and please advise.
2015-02-15 14:17:21:387
804 ec4
Misc =========== Logging initialized (build: 7.6.7600.256, tz: +0300) ===========
2015-02-15 14:17:21:387
804 ec4
Misc = Process: C:\Windows\system32\svchost.exe
2015-02-15 14:17:21:387
804 ec4
Misc = Module: c:\windows\system32\wuaueng.dll
2015-02-15 14:17:21:387
804 ec4
Service *************
2015-02-15 14:17:21:387
804 ec4
Service ** START ** Service: Service startup
2015-02-15 14:17:21:387
804 ec4
Service *********
2015-02-15 14:17:21:402
804 ec4
Agent * WU client version 7.6.7600.256
2015-02-15 14:17:21:402
804 ec4
Agent * Base directory: C:\Windows\SoftwareDistribution
2015-02-15 14:17:21:402
804 ec4
Agent * Access type: No proxy
2015-02-15 14:17:21:402
804 ec4
Agent * Network state: Connected
2015-02-15 14:17:28:313
804 3f4
Report CWERReporter::Init succeeded
2015-02-15 14:17:28:313
804 3f4
Agent *********** Agent: Initializing Windows Update Agent ***********
2015-02-15 14:17:28:313
804 3f4
Agent *********** Agent: Initializing global settings cache ***********
2015-02-15 14:17:28:313
804 3f4
Agent * WSUS server: http://192.168.1.1:8530
2015-02-15 14:17:28:313
804 3f4
Agent * WSUS status server: http://192.168.1.1:8530
2015-02-15 14:17:28:313
804 3f4
Agent * Target group: (Unassigned Computers)
2015-02-15 14:17:28:313
804 3f4
Agent * Windows Update access disabled: No
2015-02-15 14:17:28:313
804 3f4
DnldMgr Download manager restoring 0 downloads
2015-02-15 14:17:28:313
804 3f4
AU ########### AU: Initializing Automatic Updates ###########
2015-02-15 14:17:28:329
804 3f4
AU # WSUS server: http://192.168.1.1:8530
2015-02-15 14:17:28:329
804 3f4
AU # Detection frequency: 22
2015-02-15 14:17:28:329
804 3f4
AU # Approval type: Pre-install notify (Policy)
2015-02-15 14:17:28:329
804 3f4
AU # Auto-install minor updates: No (User preference)
2015-02-15 14:17:28:329
804 3f4
AU # Will interact with non-admins (Non-admins are elevated (User preference))
2015-02-15 14:17:28:360
804 ec4
Report *********** Report: Initializing static reporting data ***********
2015-02-15 14:17:28:360
804 ec4
Report * OS Version = 6.1.7601.1.0.196880
2015-02-15 14:17:28:360
804 ec4
Report * OS Product Type = 0x00000007
2015-02-15 14:17:28:360
804 ec4
Report * Computer Brand = VMware, Inc.
2015-02-15 14:17:28:360
804 ec4
Report * Computer Model = VMware Virtual Platform
2015-02-15 14:17:28:360
804 ec4
Report * Bios Revision = 6.00
2015-02-15 14:17:28:360
804 ec4
Report * Bios Name = PhoenixBIOS 4.0 Release 6.0
2015-02-15 14:17:28:360
804 ec4
Report * Bios Release Date = 2013-07-30T00:00:00
2015-02-15 14:17:28:360
804 ec4
Report * Locale ID = 1033
2015-02-15 14:17:28:360
804 3f4
AU Successfully wrote event for AU health state:0
2015-02-15 14:17:28:360
804 3f4
AU Initializing featured updates
2015-02-15 14:17:28:360
804 3f4
AU Found 0 cached featured updates
2015-02-15 14:17:28:360
804 3f4
AU Successfully wrote event for AU health state:0
2015-02-15 14:17:28:360
804 3f4
AU Successfully wrote event for AU health state:0
2015-02-15 14:17:28:360
804 3f4
AU AU finished delayed initialization
2015-02-15 14:17:28:360
804 3f4
AU Triggering AU detection through DetectNow API
2015-02-15 14:17:28:360
804 3f4
AU Triggering Online detection (non-interactive)
2015-02-15 14:17:28:360
804 ec4
AU #############
2015-02-15 14:17:28:360
804 ec4
AU ## START ## AU: Search for updates
2015-02-15 14:17:28:360
804 ec4
AU #########
2015-02-15 14:17:28:360
804 ec4
AU <<## SUBMITTED ## AU: Search for updates [CallId = {0512C3B0-1E35-4BDD-9B28-02E064DF3EFB}]
2015-02-15 14:17:28:360
804 56c
Agent *************
2015-02-15 14:17:28:360
804 56c
Agent ** START ** Agent: Finding updates [CallerId = AutomaticUpdates]
2015-02-15 14:17:28:360
804 56c
Agent *********
2015-02-15 14:17:28:360
804 56c
Agent * Online = Yes; Ignore download priority = No
2015-02-15 14:17:28:360
804 56c
Agent * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0
and DeploymentAction='Uninstallation' and RebootRequired=1"
2015-02-15 14:17:28:360
804 56c
Agent * ServiceID = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7} Managed
2015-02-15 14:17:28:360
804 56c
Agent * Search Scope = {Machine}
2015-02-15 14:17:28:360
804 56c
Setup Checking for agent SelfUpdate
2015-02-15 14:17:28:360
804 56c
Setup Client version: Core: 7.6.7600.256 Aux: 7.6.7600.256
2015-02-15 14:17:28:360
804 56c
Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
2015-02-15 14:17:28:375
804 56c
Misc Microsoft signed: Yes
2015-02-15 14:17:30:981
804 56c
Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wuident.cab:
2015-02-15 14:17:30:981
804 56c
Misc Microsoft signed: Yes
2015-02-15 14:17:30:981
804 56c
Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wsus3setup.cab:
2015-02-15 14:17:30:981
804 56c
Misc Microsoft signed: Yes
2015-02-15 14:17:30:981
804 56c
Misc Validating signature for C:\Windows\SoftwareDistribution\SelfUpdate\wsus3setup.cab:
2015-02-15 14:17:30:981
804 56c
Misc Microsoft signed: Yes
2015-02-15 14:17:30:996
804 56c
Setup Determining whether a new setup handler needs to be downloaded
2015-02-15 14:17:30:996
804 56c
Setup SelfUpdate handler is not found. It will be downloaded
2015-02-15 14:17:30:996
804 56c
Setup Evaluating applicability of setup package "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~amd64~~7.6.7600.256"
2015-02-15 14:17:30:996
804 56c
Setup Setup package "WUClient-SelfUpdate-ActiveX~31bf3856ad364e35~amd64~~7.6.7600.256" is already installed.
2015-02-15 14:17:30:996
804 56c
Setup Evaluating applicability of setup package "WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~amd64~~7.6.7600.256"
2015-02-15 14:17:31:012
804 56c
Setup Setup package "WUClient-SelfUpdate-Aux-TopLevel~31bf3856ad364e35~amd64~~7.6.7600.256" is already installed.
2015-02-15 14:17:31:012
804 56c
Setup Evaluating applicability of setup package "WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~amd64~~7.6.7600.256"
2015-02-15 14:17:31:012
804 56c
Setup Setup package "WUClient-SelfUpdate-Core-TopLevel~31bf3856ad364e35~amd64~~7.6.7600.256" is already installed.
2015-02-15 14:17:31:012
804 56c
Setup SelfUpdate check completed. SelfUpdate is NOT required.
2015-02-15 14:17:31:449
804 56c
PT +++++++++++ PT: Synchronizing server updates +++++++++++
2015-02-15 14:17:31:449
804 56c
PT + ServiceId = {3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}, Server URL = http://192.168.1.1:8530/ClientWebService/client.asmx
2015-02-15 14:17:36:721
804 56c
Agent * Found 0 updates and 76 categories in search; evaluated appl. rules of 724 out of 1278 deployed entities
2015-02-15 14:17:36:721
804 56c
Agent *********
2015-02-15 14:17:36:721
804 56c
Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdates]
2015-02-15 14:17:36:721
804 56c
Agent *************
2015-02-15 14:17:36:737
804 c4c
AU >>## RESUMED ## AU: Search for updates [CallId = {0512C3B0-1E35-4BDD-9B28-02E064DF3EFB}]
2015-02-15 14:17:36:737
804 c4c
AU # 0 updates detected
2015-02-15 14:17:36:737
804 c4c
AU #########
2015-02-15 14:17:36:737
804 c4c
AU ## END ## AU: Search for updates [CallId = {0512C3B0-1E35-4BDD-9B28-02E064DF3EFB}]
2015-02-15 14:17:36:737
804 c4c
AU #############
2015-02-15 14:17:36:737
804 c4c
AU Successfully wrote event for AU health state:0
2015-02-15 14:17:36:737
804 c4c
AU Featured notifications is disabled.
2015-02-15 14:17:36:737
804 c4c
AU AU setting next detection timeout to 2015-02-16 07:41:21
2015-02-15 14:17:36:737
804 c4c
AU Successfully wrote event for AU health state:0
2015-02-15 14:17:36:737
804 c4c
AU Successfully wrote event for AU health state:0
2015-02-15 14:17:36:784
804 56c
Report CWERReporter finishing event handling. (00000000)
2015-02-15 14:17:41:729
804 56c
Report REPORT EVENT: {6EBDD70F-EF5E-4673-9283-1A94A5FC5A0C}
2015-02-15 14:17:36:721+0300 1
147 101
{00000000-0000-0000-0000-000000000000}
0 0 AutomaticUpdates
Success Software Synchronization
Windows Update Client successfully detected 0 updates.
2015-02-15 14:17:41:729
804 56c
Report REPORT EVENT: {621A5AA7-E564-44F1-B16B-5E928ECE4BC0}
2015-02-15 14:17:36:721+0300 1
156 101
{00000000-0000-0000-0000-000000000000}
0 0 AutomaticUpdates
Success Pre-Deployment Check
Reporting client status.
2015-02-15 14:17:41:729
804 56c
Report CWERReporter finishing event handling. (00000000)

KB2720211 has been superceded by KB 2828185, I'd recommend installing that first, it resolves a lot of issues with the first update.
http://blogs.technet.com/b/wsus/archive/2013/04/16/update-solution-for-wsus-export-bug-is-now-available-for-wsus-3-x-sp2.aspx
https://support.microsoft.com/kb/2828185
It would be worth checking if those updates you think should be installed haven't already been superceded by others. It's possible newer updates have been installed, so the superceded updates could actually be declined.

Update from Exchange 2013 Cu2 to SP1 - Outlook 2010 with SP2 clients disconnected

Hi,
we recently upgraded a standalone Exchange 2013 Server to SP1. Owa works fine, but all internal Outlook 2010 Clients (with SP2) get disconnected. Creating a new Profile, and testing the internal autodiscovery leeds to an Error 12030 (Connection reset) during
the discovery process.
I already checked the Service Point, the discovery URLs, even recreated the autodiscover virtual Directory in iis. But nothing changed.
The self signed certificate, that was used before the update is further used, and well known to all Clients. As I tested, OWA is working well everywhere.
Anyone some new ideas?
Best regards
Bernhard

Hi,
How did you recreate outlook profile? Manually or Automatic?
If automatic failed, please try to recreate manually and check the result.
If manual failed, please refer to the following methods to troubleshoot the issue:
1>Try to open the following link and check the result:
https://CASName/autodiscover/autodiscover.xml
2>Try to use RCA to test outlook autodiscover and check the result.
https://testconnectivity.microsoft.com/
Thansk.
Niko Cheng
TechNet Community Support

BusinessObjects 4.1 Sp2 Client Tool setup Installer will not Start

Hi Everyone
Have installed BOE 4.1 sp2 server platform on a virtual machine running on Windows Server 2008 R2. When I tried to install the Client tools, I execute the setup.exe program, it launches the run, when I click on runs, nothing comes up.
Any suggestion I will really appreciate it.
Thanks

OK. I think I may have misled you. We tried installing BI4.0 on SQL Server 2012 and that didn't work (not supported according to the Supported Platforms documentation). I just looked at the Supported Platforms document for BI4.1 and it shows the Client Tools should be supported on Server 2008, Server 2008 R2 and Server 2012.
I'll try installing them and let you know. We would like to have them on the server also.

IPlanet 4.1 SP9 - WL 6.1 SP2 - client certs

Similar Messages

Maybe you are looking for