Iplanet ds5

I have configured the iplanet in Solaris 9 yesterday.
1. The directory server was configured with cognos user and cognos group with 1388 port.
2. The admin server port number is 1391 and it was given with root user access.
3. Created another instance with port: 1389.
4. Every thing was fine yesterday.
5. Today when I tried to login, it was no allowing.
6. When I tried to restart the iplanet server, both the directory instances are starting.
7. When I tried to start the admin server, it is responding as: iplanet-Webserver-Enterprise/6.0SP2 B01/06/2003 22:24
8. When I give stop-admin command, it responds as server not running.
AM I missing some thing? Any help will be appreciated.
Thanks

I'll assume that you can login admin console before via web server console (startconsole to DS admin server). Today, you can't because of admin (web server) restarting failure.
Check web server errors log and give us what you can see. It should be under /opt/SUNWwbsvr/https-admserv/logs (assume you install at default directory) Jerry

Similar Messages

IPlanet DS5.1 SP1 Replication Problem

Hi:
I am running iPlanet Direc Serv 5.1 SP1 on Solaris 8 boxes. I have a single master and a couple of consumers. Sometimes replication stops working in that the master binds to the clients and according to the consumer logs, it does a search and a couple of extended operations but no MOD operation to actually send any data across.
I am replicating two suffixes and they seem to work or not independently. I've tired rebooting the master and the consumer, and even reinitializing the consumer, which it does just fine, but it still won't send data updates. No errors are logged on either the master or the consumer, and the master's replication status indicates no errors, but also shows that no changes are being sent.
I don't know if this is pertinent, but the master is configured as a legacy consumer and gets its data from a DS4.12 server.
The symptoms are very similar to what was reported by Chandra Mouli in June 2002. Unfortunately the response then was wait for the next version. If anyone has any thoughts on what I am doing wrong that is causing thsi bug, I would greatly appreciate hearing from you. Thanks.
Russ

Hi Olivier,
Usually， the error will occurs when you upgrade to the SQL Server 2012 SP2. We can upgrade to SQL Server 2012 SP2 with CU1. According to your description, the error still exists.
As a workaround we suggested that change the column type for “last_local_recgen” in table named as “sysmergesubscriptions” both for Published and Subscribed databases. Microsft had added an additional 3 columns to a replication table named 'dbo.sysmergesubscriptions'
in SP2 and there is one column having a wrong datatype. You can use the below script to fix the datatype.
if exists (select * from sys.columns sc inner join sys.types st on sc.system_type_id = st.system_type_id
where object_id = object_id('dbo.sysmergesubscriptions') and sc.name = 'last_local_recgen' and st.name = 'uniqueidentifier')
begin
begin transaction
alter table dbo.sysmergesubscriptions drop column last_local_recgen
alter table dbo.sysmergesubscriptions add last_local_recgen bigint null
Commit transaction
End
Regards,
Sofiya Li
Sofiya Li
TechNet Community Support

Replication between DS5.0 and DS4.X

The iPlanet DS5.0 documentation is a bit unclear..
Can I set up a replication-agreement between a DS5.0 and a DS4.X where DS5.0 is the master and DS4.X the consumer?
Thanks and regards,
Oscar

No. You can only replicate from a 4.x supplier to a 5.0 (or later) consumer.

Iplanet DS 5.0 SP1 on Solaris 7 : does not work

For you information :
After a fresh installation of iPlanet Directory Server 5.0 SP1 on
Solaris 2.7 on an E250 we are unable to restart the server from command
line or from netscape console.
In slapdmyinstance/logs/errors we see some error about DB3 files in
slapdmyinstance/db/NetscapeRoot...
The admin server run as root (default option) and the 'myinstance' run
as 'nobody' (default option)
For the moment, our solution was to re-install Netscape Directory Server
4.16..
It's maybe a Sun patch missing but when you want to download iPlanet DS5
the Solaris 7 version is not listed, you have the choice between 2.6 or 8.
If you try to download Netscape DS 4.16, then the three versions are
listed (2.6,2.7 & 8)
N.Martignole

Hi,
U can start or stop the directory server from the command line go to the installation directoy where the directoy server installation files are present.Usually under /usr by default check for the directory "slapd-"system name or system identifier" which u gave at the the time of installation go to this directory ,U will find files start-slapd ,stop-slapd and restart-slapd .
The patches for Ur system can be checked in iplanet product dodument or their official support persons.

Problem with native ldapsearch in Solaris 10

Hi all,
someone could tell me please why native ldapsearch in Solaris 10 do not work with SSL connection when same command comes with Sun Directory Server 5.2 works perfectly ?
With native ldapsearch in Solaris 10, I get the error message "Can't contact LDAP server":
# /bin/ldapsearch -v -h ldapserver -p 636 -Z -P /var/ldap -b dc=exemple,dc=fr -s base objectclass=\*
ldap_init( ldapserver, 636 )
filter pattern: objectclass=*
returning: ALL
filter is: (objectclass=*)
ldap_search: Can't contact LDAP server
When, on the same host, on which Directory server is installed, there's no problem:
# /var/opt/mps/serverroot/shared/bin/ldapsearch -v -h ldapserver -p 636 -Z -P /var/ldap -b dc=exemple,dc=fr -s base objectclass=\*
ldap_init( exemple, 636 )
ldaptool_getcertpath -- /var/opt/mps/serverroot/alias
ldaptool_getkeypath -- /var/opt/mps/serverroot/alias
ldaptool_getdonglefilename -- (null)
filter pattern: objectclass=*
returning: ALL
filter is: (objectclass=*)
version: 1
dn: dc=exemple,dc=fr
nisDomain: exemple.fr
objectClass: top
objectClass: domain
objectClass: nisDomainObject
1 matches
What can I do to bind to ldap server with SSL connection from an ordinary work station?
Thank you in advance.
Dra

Hi :
"The /usr/bin/ldapsearch is an old version that does not support the "-Z" and "-P" flags to test SSL connection on port 636, use the ldapsearch command from SUN DS5.0/5.1 that comes bundled with Solaris9 and usually installed at /usr/iplanet/ds5 (DS5.0/5.1) or /var/Sun/mps (DS5.1/5.2) or /var/opt/mps/serverroot (DS5.2)"
Source : http://forums.sun.com/thread.jspa?threadID=5089467
Hope this can help,
Regards,
Groucho_fr

How to initialize my Directory Server

my data are stored in a RDBMS, and now I want to transform the data into Sun Derectory Server. The problem is when the data are mass, how to do the transformation. I don't know if there is any tool to do this, or I have to develop my own program to do this.
hope some information.
thanks.

In CDE X-Windows terminal, run �prodreg� to uninstall components.
# prodreg
If �prodreg� does not work, manual �clean-up� may be performed:
# rm �f /var/sadm/install/productregistry
# rm �f /var/sadm/install/logs/*_install*
# cd /var/sadm/pkg
# rm �rf SUNWdsv* SUNWasv* SUNWcomds
Then unset the �installed?� flag(s) in /etc/ds/versions (this may not apply to your case)
#version|command path|installed?|default?
5.1|//usr/iplanet/ds5/sbin/directoryserver|YES|NO
5.2|//usr/ds/v5.2/sbin/directoryserver|NO|YES

Openldap and solaris 10

I'm trying to setup openldap 2.3.4 on Solaris 10. I've read the plethora of internet posting for Solaris 8 & 9 that claim to have a working ldap server, but little on Solaris 10. I've tried "everything" to get it work but to no avail. Can anyone point me to the minimum amount of documnets to get openldap working on Solaris 10.

Don't forget to:
1) add an nisDomainObject at the root DN
dn: dc=example,dc=com
objectclass: top
objectclass: organization
objectClass: nisDomainObject
nisDomain: example.com
objectclass: dcObject
o: Example Companies
dc: example
2) Add ACL in slapd.conf to allow reading of rootDSE.
access to dn.base="" by * read
A typical example for ACLs is shown below (note: add spaces before all the "by" lines, as indication of line continuations.
===
access to attrs=userPassword
by self write
by * auth
access to dn.base=""
by * read
access to dn.base="cn=Subschema" by * read
access to dn.subtree="ou=People,dc=example,dc=com"
by self write
by dn="cn=proxyagent,ou=profile,dc=example,dc=com" read
by users read
by anonymous auth
access to * by self write
by * read
===
Also I would like to make a qualification:
The "result.c" patch at
http://web.singnet.com.sg/~garyttt/result_c_patch.txt
IS MEANT for OpenLDAP version 2.2.XX, not 2.3.X, I haven't tried it on 2.3.X
But if it works, by all mean.
This patch existed since few years ago, but was never incorporated by OpenLDAP debvelopers, I am not sure if OpenLDAP developers will listen "in the name of InterOperability betwwen SUN and OpenLDAP products", and come out with an official patch in OpenLDAP 2.3.6 or later for rootDSE reading issue.
Assuming you use OpenLDAP 2.2.26 the latest stable release for 2.2.XX, and apply the "result.c" patch, after that you should be able to verify that it works using the following commands, prior to running "ldapclient -v init ...".
# cat chk_rootdse_openldap.sh
LDAP_ROOT=/usr/local
LD_LIBRARY_PATH=$LDAP_ROOT/lib:$LD_LIBRARY_PATH; export LD_LIBRARY_PATH
echo "Testing LDAP Master..."
$LDAP_ROOT/bin/ldapsearch -h XXX.XXX.XXX.XXX -b "" -s base "(objectclass=*)" "+"
or
# cat chk_rootdse_solaris.sh
LDAP_ROOT=/usr/iplanet/ds5
LD_LIBRARY_PATH=$LDAP_ROOT/lib:$LD_LIBRARY_PATH; export LD_LIBRARY_PATH
echo "Testing LDAP Master..."
$LDAP_ROOT/shared/bin/ldapsearch -h XXX.XXX.XXX.XXX -b "" -s base "(objectclass=*)" "+"
HTH.
Gary

Problem with Dataguard Wizzard in OEM 10

Hi,
I've tried to create a physical standby database of a 10gR2 instance on the same host (windows 2003 64 bits) through OEM 10, and I get an error message at the first step.
I select "create a physical standby database" and I get this in french :
"Impossible de déterminer l'architecture de l'hôte principal."
which means something like :
"Unable to detect (or to find) main host architecture"
I didn't find anything related to this in alert.log or in OMS log files.
Does anyone know about this ?
I'll try to do it manually, but I'd like to understand why the wizzard is not working.
Thanks for your help

Hi :
"The /usr/bin/ldapsearch is an old version that does not support the "-Z" and "-P" flags to test SSL connection on port 636, use the ldapsearch command from SUN DS5.0/5.1 that comes bundled with Solaris9 and usually installed at /usr/iplanet/ds5 (DS5.0/5.1) or /var/Sun/mps (DS5.1/5.2) or /var/opt/mps/serverroot (DS5.2)"
Source : http://forums.sun.com/thread.jspa?threadID=5089467
Hope this can help,
Regards,
Groucho_fr

TZupdater: Exception in thread "main" java.lang.NoClassDefFoundError:

Hello,
I am using the tool tzupdater over Solaris 9 to get java compliant with new DST (Daylight Saving Time) for US (2007).
I am using the following command:
# find /usr -fstype nfs -prune -o -fstype autofs -prune -o -name java -print -exec {} /marksman/packages/tzupdater2006p/tzupdater.jar -u \;
Getting the following messages:
/usr/bin/java
Exception in thread "main" java.lang.NoClassDefFoundError: /marksman/packages/tzupdater2006p/tzupdater/jar
/usr/dt/appconfig/netscape/java
/usr/j2se/bin/java
Exception in thread "main" java.lang.NoClassDefFoundError: /marksman/packages/tzupdater2006p/tzupdater/jar
/usr/j2se/bin/sparcv9/java
Exception in thread "main" java.lang.NoClassDefFoundError: /marksman/packages/tzupdater2006p/tzupdater/jar
/usr/j2se/jre/bin/java
Exception in thread "main" java.lang.NoClassDefFoundError: /marksman/packages/tzupdater2006p/tzupdater/jar
/usr/j2se/jre/bin/sparcv9/java
Exception in thread "main" java.lang.NoClassDefFoundError: /marksman/packages/tzupdater2006p/tzupdater/jar
/usr/j2se/opt/javahelp/doc/api/com/sun/java
/usr/java
/usr/iplanet/console5.1/java
/usr/iplanet/ds5/java
/usr/iplanet/admserv5.1/java
/usr/apache/jserv/docs/api/org/apache/java
/usr/java1.2/bin/java
Exception in thread "main" java.lang.NoClassDefFoundError: /marksman/packages/tzupdater2006p/tzupdater/jar
/usr/java1.2/jre/bin/java
Exception in thread "main" java.lang.NoClassDefFoundError: /marksman/packages/tzupdater2006p/tzupdater/jar
/usr/java1.2/jre/bin/sparc/native_threads/java
Exception in thread "main" java.lang.NoClassDefFoundError: /marksman/packages/tzupdater2006p/tzupdater/jar
/usr/appserver/samples/rmi-iiop/cpp/src/client/java
/usr/appserver/samples/rmi-iiop/cpp/src/client/org/omg/boxedRMI/java
/usr/dlc91d/jre/bin/java
Exception in thread "main" java.lang.NoClassDefFoundError: /marksman/packages/tzupdater2006p/tzupdater/jar
/usr/dlc91d/jre/bin/sparc/native_threads/java
Exception in thread "main" java.lang.NoClassDefFoundError: /marksman/packages/tzupdater2006p/tzupdater/jar
/usr/dlc91d/java
Any idea why I am getting this error, and how can I fix it?
Thank you

Hi,
I was wondering if you ever saw a resolution to your problem. I am seeing the same error on Windows and can't figure out what is causing it. Any information is appreciated.
Thanks,
Marina Orton

Adobe Form Server 5.1 Memory Problems

FSService.exe increases memory when serving forms but never releases it.
The forms are of the Form Server type and they have several calls to an InHouse COM Component.
The COM Component was developed to encapsulate the calls to our Legacy systems via ODBC, COMTI, etc.
We have detected that the FSService releases the memory when serving forms that doesn't make calls to our COM Component.
We want to know if this behavior is normal when calling COM Components from the forms or is this a bug and if so if there is a way to solve it?
Thanks...

1) I don't know what you've typed in when installing... but I've never seen that message. Are you using any language specific characters ?
Do you get the error after this screen ?
<b>
The suffix is the root of your directory tree. You may have more than
one suffix.
Suffix [dc=sun,dc=com]:
</b>
If yes, then this means that the value you typed in is not a valid DN... and you must enter a valid one.
2)The Directory Server is installed under /usr/iplanet but the database is under /var/iplanet/ds5 and configuration is under /etc/iplanet/ds5 ...
You can use symbolic links if you want to move things around.
3) You mean you downloaded the tar.gx file of iDS 5.1 and install it on Solaris 9... No problem, I do this every day. As long as you have right to create directories and files, you should be able to install as anyone. If not, you should install as root and then let the server run as a special user.
4) Solaris 9 comes with iDS5.1 packages already installed. But the server is not configured at all.
Running directoryserver setup allows you to configure it and create the database, accounts...
Running directoryserver uninstall remove the instance of the installed database... It doesn't remove the packages. You can start again a setup...
By the way, I think that iDS 5.1 on Solaris 9 comes with the full documentation... May be you should start by reading it.
Regards,
Ludovic.

Unable to log into Directory Console

Hi,
I am using Directory server 5.2.
When I try to login to my directory console , I keep getting HttpException: Response: HTTP/1.1 500 Server Error . I tried both admin and directory manager. I am sure that my user id, password and port is correct, and the admin server is running. I notice some warnings in the admin server logs, but do not know what to make out of it.
[11/Sep/2004:10:36:11] info ( 6194): successful server startup
[11/Sep/2004:10:36:11] info ( 6194): SunONE-WebServer-Enterprise/6.0SP3 B05/14/2003 17:58
[11/Sep/2004:10:36:11] warning ( 6194): admin40_check_ds_availability_init(): WARNING: Unable to determine the location of the User and Group DS (unable to set User/Group baseDN)
[11/Sep/2004:10:36:11] failure ( 6194): Warning! admin40_task_eval_init(): unable to build User Group Info (unable to set User/Group baseDN)
[11/Sep/2004:10:36:11] failure ( 6194): admin40_host_ip_init(): PSET failure: Failed to create PSET handle (pset error = Authentication failed)
[11/Sep/2004:10:36:11] info ( 6196): Installing a new configuration
[11/Sep/2004:10:36:11] info ( 6196): [LS ls1] http://ldap.mic.com, port 390 ready to accept requests
[11/Sep/2004:10:36:11] info ( 6196): A new configuration was successfully installed
[11/Sep/2004:10:36:12] info ( 6196): Using the Java HotSpot(TM) Server VM v1.4.1_01a from Sun Microsystems Inc.
[11/Sep/2004:10:36:12] info ( 6196): Loading IWSSessionManager by default.
[11/Sep/2004:10:36:12] info ( 6196): IWSSessionManager: Maximum number of sessions is 1000
[11/Sep/2004:10:36:12] security ( 6196): for host 0.0.0.0 trying to GET /, admin40_host_ip_check reports: Unauthorized host ip=0.0.0.0, connection rejected
[11/Sep/2004:10:36:57] security ( 6196): for host ldap. trying to GET /admin-serv/authenticate, admin40_host_ip_check reports: Unauthorized host ip=::ffff:192.168.176.12, connection rejected
Any advice is much appreciated.
Thanks.

here is solution:
Sunsolve.sun.com
Document ID:     75322
Resolution:     Top
The reason you cannot log in to the console is because a password
has expired. That password belongs to the admin-serv-<hostname>
user. Don't confuse this user with the normal
admin user in LDAP. Unfortunately, the admin-serv-<hostname>
user is not like the Directory Manager; that is, the password for the
admin-serv-<hostname> user will expire unless you take some
corrective action beforehand, such as adding the user to a group with
passwords that never expire or adding a specific password policy
to the user.
Every time a user (Directory Manager, Admin, and so on) logs in to the
console, the user (admin-serv-<hostname>) needs to successfully bind
to the directory server. If the password has expired, that bind cannot
happen.
To find the user (admin-serv-<hostname>), perform the following steps.
Step 1: Locate the User With the Expired Password
Search for the user (admin-serv-<hostname>) using the following
syntax as an example:
root/edog# ldapsearch -D "cn=Directory Manager" -w <password> -h <hostname>
-p <port> -b o=netscaperoot "cn=admin-serv-*"
The following provides an example of an search for the user:
   root/edog# ldapsearch -D "cn=Directory Manager" -w dirmanager -b
   o=netscaperoot cn=admin-serv-edog
   cn=admin-serv-edog, cn=Netscape Administration Server, cn=Server Group,
   cn=edog.labnet.east.sun.com, ou=labnet.east.sun.com, o=NetscapeRoot
   objectClass=top
   objectClass=netscapeServer
   objectClass=nsAdminServer
   objectClass=nsResourceRef
   objectClass=groupOfUniqueNames
   cn=admin-serv-edog
   nsServerID=admin-serv
   serverRoot=/usr/iplanet/ds5
   serverProductName=Administration Server
   serverHostName=edog.labnet.east.sun.com
   uniqueMember=cn=admin-serv-edog, cn=Netscape Administration Server,
   cn=Server Group, cn=edog.labnet.east.sun.com, ou=labnet.east.sun.com,
   o=NetscapeRoot
   installationTimeStamp=20021218212731Z
   userPassword={SSHA}kZeUzbMMbisvxMnALP3tjk3KGaNmIb8Ih29ddw==
Step 2: Manually Change the User's Password
a) Use the Directory Manager to change the user password attribute in
   the following entry (returned by the command in Step 1).
   cn=admin-serv-edog, cn=Netscape Administration Server, cn=Server Group,
   cn=edog.labnet.east.sun.com, ou=labnet.east.sun.com, o=NetscapeRoot
b) Use the ldapmodify command, as in the following example, with a new
   password, such as "abcd1234":
   ./ldapmodify -D "cn=Directory Manager" -w dirmanager -h <hostname> -p
   <port>
   dn: cn=admin-serv-edog, cn=Netscape Administration Server, cn=Server
   Group,
   cn=edog.labnet.east.sun.com, ou=labnet.east.sun.com, o=NetscapeRoot
   changetype:modify
   replace:userpassword
   userpassword: abcd1234
Step 3: Edit the adm.conf File (<server root>/adm-serv/config)
a) Stop the Administration Server:
   ./stop-admin
Now, change the password in the Administration Server's
adm.conf file so it knows to use the new password to bind
to the directory server.
b) Change the directory:
    cd <server root>/admin-serv/config
c) Use the vi text editor in the adm.conf file to find a line that is
   similar to the following:
    siepid:   admin
d) Edit the adm.conf file so the siepid value matches the new password
    that you created Step 2:
    siepid:   abcd1234
e) Start the Administration Server and make certain that you see no
   "PSET failed" errors in the errors log. These errors indicate that
   there was a problem loading the o=netscaperoot information.
Now, you should have no problem logging into the console.

Changing IP Address and ports in Directory Server 5.1 SP 4 and 5.2 SP4

I have installed multiple instance of Sun Directory Server 5.1 and 5.2 on ports 389 and 390,now I want to change the IP Address and ports, I am able to change the directory server port from 389 by editing the dse.ldif file, now I want to change the port 390 and the IP address same as directory server, can someone expert from the forum guide me.
Thanks in Advance.
Mukesh Kumar

1) I don't know what you've typed in when installing... but I've never seen that message. Are you using any language specific characters ?
Do you get the error after this screen ?
<b>
The suffix is the root of your directory tree. You may have more than
one suffix.
Suffix [dc=sun,dc=com]:
</b>
If yes, then this means that the value you typed in is not a valid DN... and you must enter a valid one.
2)The Directory Server is installed under /usr/iplanet but the database is under /var/iplanet/ds5 and configuration is under /etc/iplanet/ds5 ...
You can use symbolic links if you want to move things around.
3) You mean you downloaded the tar.gx file of iDS 5.1 and install it on Solaris 9... No problem, I do this every day. As long as you have right to create directories and files, you should be able to install as anyone. If not, you should install as root and then let the server run as a special user.
4) Solaris 9 comes with iDS5.1 packages already installed. But the server is not configured at all.
Running directoryserver setup allows you to configure it and create the database, accounts...
Running directoryserver uninstall remove the instance of the installed database... It doesn't remove the packages. You can start again a setup...
By the way, I think that iDS 5.1 on Solaris 9 comes with the full documentation... May be you should start by reading it.
Regards,
Ludovic.

Certificate Generation

I am still attempting to get TLS/SSL set up with my LDAP. I have a feeling I am not generating my certificates correctly. Or that I am not placing them in the proper places. After installing the certificates in the server and activating ssl, and adding a certificate and verifying it in netscape and doing the certutil commands to generate a bin file, I get the following when doing an ldapsearch
SSL error -8101 (Certificate type not approved for application.)
I am using the ldapsearch in /usr/iplanet/ds5/share/bin.
What is the purpose of the bin file from certutil? Where should it go?
Ideas / Suggestions / docs to look at?

Can you confirm that your directory server comes up SSL enabled?
Do you see the directory server listening on the secured port?
I think you have problems with the trust flags on the certificate you use on the server side.
Start the Directory Server console, go to the Manage Certificates menu, select your certificate from the list and then you can change the trust settings of the certificate.
Bertold

Ugldapusessl option in Messaging server

I'm trying to configure an iPlanet Message store to do secure LDAP searches by setting the 'local.ugldapusessl' to 'YES' and ugldapport to 636. I have installed certs on both the directory server (iplanet DS5.1SP1) and the message store (iMS5.2). I am able to to secure ldapsearches (using -Z, -P and -K) options on the directory. However, the message store initiated searches always time out (err=85). Any clues as to what I'm missing here?
Is there more details available on the ugldapusessl option ?
Thanks.

Yes the secure search has to go thru a firewall..Anyways, we were just informed by Sun support that this feature is not supported in iMS5.x yet...

Apply ids 5.1sp1 on Solaris 9

I like to apply Sun One Directory Server 5.1sp1 on Solaris 9. However, the installed path of it is not in /usr/iplanet/ds5 and /var/ds5. ( there is a lot of bugs in master-master mode in replication)
Is there any method to do that?
Lucas

nevermind. i've figured out i needed to run "/usr/sbin/directoryserver setup" first.

Iplanet ds5

Similar Messages

Maybe you are looking for