IPlanet CMS 4.7 and PGP 8.03

Hello, I am trying to use iPlanet CMS 4.7 as a CA for PGP.
Does anyone know how to configure iPlanet CMS in order to work with PGP?
Thanks for your feedback!
Cheers, Stefan

Hi there,
I believe that the issue you are encoutering looks like the following:
"The CMS installation wizard fails when creating the internal database.
I'm running the installation wizard and it fails to accept the information I enter for the internal database. I'm getting the "Invalid Credentials" error message.
When creating the internal database, which is an instance of Netscape Directory Server 4.1, the CMS installation wizard performs some LDAP operations by calling command-line tools, such as ldapmodify. These tools are invoked by /bin/sh on Solaris. One of the command-line arguments to the tool is the bind password. If this password has any other character interpreted by the shell (for example, #, $, %, *, (, ), -, ', ", ?, \, |, ~, or `), the password gets mangled by the shell, causing ldapmodify to fail (with an "Invalid Credentials" error), which in turn causes the wizard to fail.
To workaround the problem, use an alphanumeric password for the internal database. [# 357672]"
The above information was found in an old FAQ of CMS 4.1x.
Hope this would help.
Cheers / Damien.

Similar Messages

Pin removal problem in iPlanet CMS / DS

hi,
Can anyone throw some light on the problem I'm having:
How iplanet CMS removes pins for which the pinattr atribute is not mapped to
"pin" ,but some other artibute.
The CMS.cfg gets updated with the proper value of pinattr viz
auths.instance.PinDirEnrollment.pinAttr=pin/adppin as given through the
GUI,the Pin based enrollment works fine to the point of authenticating
against the uid ,password and PIN supplied .But after certifcate isuual if
the pinattr value is set to an attribute which is not named "pin" ,it fails
to remove the pin for that entity .
The exact reason for not removing cant be traced until unless we actually
get to debug the plug-in PinRemovalListener.java and PinRollment realted
java files.
I am not able to figure out why it is not able to take the correct mapping
at the time of pin removal which it could do at the time of pin
authentication.
Any information / pointers will be greatly appreciated.
TIA
- toohey

Did the packages install correctly?
If yes, run the following command to configure a DS instance:
/usr/ds/v5.2/sbin/directoryserver configure -debugMessage | tee config.out
This will turn on lots of debug info and send it to a file called config.out. This should help you determine your problem.
HTH,
Roger S.

CMS is unstable and will shut down immediately.

The CMS went down couple of times after windows update on CMS database. Following updates were installed on the SQL database.
KB948109 SQL Server Database Services 2005
KB948109 SQL Server Tools and Workstation Components 2005
KB943109 SQL Server Integration Services 2005
CMS Database Ver: SQL 2005
ODBC Driver Ver for Connecting through Enterprise: 2000.86.1830.00
Error Message:
CMS is unstable and will shut down immediately. Reason: Database access error. Reason [Microsoft][ODBC SQL Server Driver][SQL Server]Incorrect syntax near ')'..
Anyone else facing the same issue ?
Will an ODBC upgrade on Crystal Server fix the issue?

Please post this query to the Business Objects Enterprise Administration forum:
BI Platform
That forum is monitored by qualified technicians and you will get a faster response there.
Thank you for your understanding,
Ludek

Mail 2.0.7 and PGP

I am trying to get PGP to work with Mail, but running into a problem. On my 10.4.6 machine, I have Mail 2.0.7 and PGP 9.0.6, but the decrypt option does not come up when I open a PGP encrypted message. On my 10.3.9 machine, running PGP 9.0.1, I do get the decrypt option. Is this something with the newer mail, or did I not install PGP correctly?
Thanks,
Jeff

I am trying to get PGP to work with Mail, but running into a problem. On my 10.4.6 machine, I have Mail 2.0.7 and PGP 9.0.6, but the decrypt option does not come up when I open a PGP encrypted message. On my 10.3.9 machine, running PGP 9.0.1, I do get the decrypt option. Is this something with the newer mail, or did I not install PGP correctly?
Thanks,
Jeff

Coldfusion and PGP

Hi All,
I have pgp desktop installed on my server and I try to
decrypt a string using my private & public key but I am
completely lost...
Should I use cfexecute with gnugp, a cfx tag or open pgp or
the Bouncy Castle Cryptography Library ...
I have a post form where I recieve a encrypted userid and I
just need to decrypt it ...
Can you please help ?

ToeJam, when you said ... "whether to DB or FTP for later distribution" ... I instantly withdraw my comments in your case because quite clearly you are doing the right thing now in your case.
It is "particularly correct," if you will, that they are creating and exchanging digital certificates so that "they can be revoked, thus rendering future data packets unusable." The certificates would be issued with a fairly short expiration date, each one to an individual recipient and/or for a particular message type, and those would be updated on a regular basis (whether or not message compromise was suspected).
Many people make the mistake of using strong encryption (like PGP) with ... (doh!!) ... "passwords." There is a vast difference between using a "simple password" and using a digital certificate, which of course may be "protected with" a password. You're doing it right.
For your scenario, SSL is not an appropriate or a sufficient technology, and PGP/GPG (specifically "in the way that you are now using it...") unarguably and indisputably is.
When information has to be handled by a non-secure store, or a multi-stage transport (like e-mail) which can and probably does make copies at each stop, then obviously the only way to handle the situation is to encrypt the message before tendering. The mechanism obviously also needs all of the things that you are now giving it: individually revocable certificates; validation of both message content and sender/recipient address; secure certificate/key exchange.

I have a big problem with Lion and PGP. After upgrading from snow leopard to lion I cannot access my PGP drive which was generated under snow leopard. PGP does not start but gives a notion that lion cannot work with my PGP version. Solution?

After upgrading from Snow Leopard to Lion I cannot access a PGP drive which was generated under snow leopard. PGP does not start. When I try to start I just receive a message that Lion cannot work with PGP. How can I now access important and confifential informatio which I have stored in PGP (snow leopard). Do I have to move back to snow leopard. If so, how can I do this?

If you have this product,
http://www.symantec.com/business/support/index?page=content&id=TECH165159
you have to go back to Snow Leopard.
To re-install SL, back up your home directory, format and re-install.

CMS for Dreamweaver and PHP with MySQL

Hello
I am at a medium level with Dreamweaver MX and 8. I have
created a dynamic website running PHP and MySQL. The site sells
luxury yachts (resales). What I need is a simple, not too custom
code heavy content management system to allow the client to update
dynamic text areas and upload images via a web browser (IE7 PC).
The site needs the ability to input new boats, and delete sold
boats (flush out the database items).
Has anyone got a recommendation for some CMS software,
preferably Mac OSX PPC and running on a server under linux.
I don't mind buying it, in fact rather do that than risk
shareware going forward.

I have the exact same need. Looks like nobody had any
suggestions for the original poster. Perhaps someone can make a
recommendation this time? I too am looking for a commercial
product, rather than open-source.

Java JVM 8: Using incremental CMS is deprecated and will likely be removed in a future release

Hello,
We (my company) have been using YoungGC=Parallel; Old=CMS/Incremental since Java 1.5 for a Java caching application running in a 64 GB heap (yes, even in HotSpot 1.5).
At various times, we have tested the G1 collector. The performance for our caching application has not met expectations with G1GC. Always looking for ways to improve the system, we are certainly open to new technologies. However, the loss of the CMS collector will mean our application won’t be able to adopt newer versions of Java.
Basic JVM options for GC:
-XX:+UnlockExperimentalVMOptions
-XX:+UseParNewGC
-XX:+UseConcMarkSweepGC
-XX:+CMSIncrementalMode
-XX:-CMSIncrementalPacing
-XX:CMSIncrementalDutyCycleMin=100
-XX:CMSIncrementalDutyCycleMin=95
-XX:+ExplicitGCInvokesConcurrent
-XX:ConcGCThreads=6
With these options, on servers with 64GB heap used at 60% and thousands of QPS, we see Young GC pauses in the range of 50-100 ms every roughly 10 seconds (for .5-1% of the time) and about the same for the short GC pauses of the background CMS. We NEVER see a long CMS pause and the servers run for months at a time, being taken down pretty much only to patch the OS. With a new generation of the hardware, improved software and taking advantage of the ConcGCThreads option, we are just beginning a series of tests to determine how high we can crank-up the memory to reduce the farm size.This project is expected to go OpenSource later this year. Without the CMS collector, very large heaps will become very difficult (or impossible) to manage.
Before removing the CMS collector, and I understand it is causing grief to still have it in the Java code base, please ensure there is an adequate replacement (G1 is currently not it).
Thank you for your attention,
Pierre

I recomend you probe and test the MetaSpace GC policy in 1.8
Probably you improve the application in 30% of performance terms.

Gmail and PGP Support package

Hello,
Does PGP BB work with gmail e-mail client?
Can PGP BB works only with PGP Desktop Software?
Thank you.

Hi and Welcome to the Community!
I can't know, from what you said, exactly what you have and have not yet tried. Hence, I recommend you go here and search on PGP...and hopefully one of the public KB articles will contain what you need:
http://btsc.webapps.blackberry.com/btsc/microsites/microsite.do
Good luck and let us know!
Occam's Razor nearly always applies when troubleshooting technology issues!
If anyone has been helpful to you, please show your appreciation by clicking the button inside of their post. Please click here and read, along with the threads to which it links, for helpful information to guide you as you proceed. I always recommend that you treat your BlackBerry like any other computing device, including using a regular backup schedule...click here for an article with instructions.
Join our BBM Channels
BSCF General Channel
PIN: C0001B7B4 Display/Scan Bar Code
Knowledge Base Updates
PIN: C0005A9AA Display/Scan Bar Code

What triggers CMS in ATGProduction and ATGStaging?

I have been troubleshooting a problem that had our ATGProduction cluster misconfigured such that CatalogMaintenanceHelper was not active=true on any server in the cluster. Correcting the problem was easy enough, but now I am left trying to figure out how to test the fix. I was under the impression that, at the end of each BCC Project deployment from ATGPublishing, CMS would run on one of the machines in the target cluster. This doesn't seem to be the case (or I'm not looking in the right place). How do I confirm that my fix is working and CMS is running correctly in ATGStage and ATGProduction?
As always, any help or insights are greatly appreciated.
Edited by: robertkuhar on Apr 18, 2012 12:20 PM

Check this thread:
Catalog Maintanance Service
Check this component in dyn/admin /atg/epub/DeploymentAgent/?propertyName=deploymentEventListeners
There should be CatalogMaintenanceHelper listener configured which triggers the CMS.

Difference between iPlanet Personalized Knowledge Pack and iPlanet Personalized Knowledge Services

Give detail description on each
ThankU in advance

Hi,
The following links throws more light on iPlanet's Personalized Knowledge Servives and iPlanet Personalized Knowledge Pack.
http://docs.iplanet.com/docs/manuals/pks/301c/relnotes.html#What
http://www.iplanet.com/products/iplanet_portal_pkp/faqs_portal_pkp.html#What
Cheers,
raj_slash.

NW Dev Studio, CMS, Dev, consolidation and production stack levels

What are the rules for the stack levels when related to NW development. If my nw dev studio is on stack 11 and my SLD CMS is on stack 10 and my target deployment on DEV is stack 8, what are my limitations.? Does anyone know of any restrictions SAP has related to webdynpro development and stack level.
Thanks
Mikie

it is strongly recommended to <b>keep DevStudio and target run-time system on the same level</b>
NWDI servers are release independent, they should contain proper content:
- SLD content should be updated to the "highest" level in landscape (11 in your case)
- CMS should be in sync with SLD
- CBS build space should contain build plugins and libraries corresponsing to the target run-time
NWDS sp11 will produce sp11 compatible components,
if build space contains fitting to run-time (sp8) build plug-ins there are chances to have successful local build, but errors during build on CBS
if build space contains fitting to NWDS (sp11) build plug-ins there are chances to have successful local and central (CBS) build, but problems at run-time.
Hope to not confuse you with all these permutations
Cheers.

Iplanet/sun one 6 and redhat 8

Has anyone been able to migrate to RedHat Linux 8.0 on a server that already has Sun One 6 installed? My web server is currently running 7.1, but that's no longer supported by RH. I'd like to go ahead and move it to something newer. I have the installation media for 7.3 and 8.0.

It may work but here's a list of officially tested and supported versions:
http://docs.sun.com/source/816-6770-10/rn60sp6.html#36474
I hear that you can make things run by installing Red Hat's compat RPMs but again this will be unsupported/untested.
Thanks,
Manish

Iplanet portal server look and feel limitations

does anyone know what's portal server look and feel limitations? Eg : what components that cannot be changed? Thanks a lot.:)

Actually, you have an almost clean slate. You need to have some sort of header (though I suppose it could be 1 pixel high...), and by turning off the channel frames, you can eliminate the portal feel altogether. Take a look at www.tntvacations.com to see a portal server. The only way you can tell it is portal is through the URL... behind the scenes, it is set up with the thin-thick-thin channel layout, with 8 channel providers. The header and secondary menu components that are part of the customized desktop servlet.

Our architecture is we have installed iplanet applicationserver on NT and iplanet webserver on solaris with webconnector plugin installed but performnce is not upto mark

Do you mean the appserver can't service the requests quick enough ? i.e the plugin reqexit time from the kxs log is too long ?

IPlanet CMS 4.7 and PGP 8.03

Similar Messages

Maybe you are looking for