Is Sun's LDAP CertStore broken when used with DS 5.2?

please! can anybody help me figure out how to get
java.security.cert.CertStore.getCertificates() working with Sun ONE Directory
Server 5.2?
i've been up all night scouring this forum and the entire net to no avail. the
only suggested "solution" i've come across goes along the lines of "make
sure your directory server's schema is rfc 2587-compliant!".
well, i've done that. per rfc 2587 - http://www.ietf.org/rfc/rfc2587.txt - i've
extended DS 5.2's default schema with the following objects & attributes:
dn: cn=schema
changetype: modify
add: objectClasses
objectClasses: ( 2.5.6.21 NAME 'pkiUser' DESC 'auxiliary
class for non-CA certificate owners defined by RFC 2587'
SUP top AUXILIARY MAY userCertificate X-ORIGIN 'RFC
2587' )
dn: cn=schema
changetype: modify
add: objectClasses
objectClasses: ( 2.5.6.22 NAME 'pkiCA' DESC 'class for
Cartification Authorities defined by RFC 2587' SUP top
AUXILIARY MAY ( authorityRevocationList $ caCertificate $
certificateRevocationList $ crossCertificatePair )
X-ORIGIN 'RFC 2587')and the following code still returns bupkus!
          LDAPCertStoreParameters params = new
                       LDAPCertStoreParameters( "localhost" , 389);
          X509CertSelector xcs = new X509CertSelector();
                // an entry with a cert with this subject dn DOES exist in the directory
          xcs.setSubject("CN=Sun Certified Java Programmer,
                      OU=Development, O=ACME, L=AnyTown, ST=51st, C=UK");
          CertStore store = CertStore.getInstance("LDAP", params );
          log.info(store.getType()); // prints "LDAP"
          Collection certs = store.getCertificates(xcs);
          log.info(certs.size()); // prints "0"
                 ...here are the results of setting -Djava.security.debug=certpath:
certpath: LDAPCertStore.engineGetCertificates() selector: X509CertSelector: [
Subject: CN=Sun Certified Java Programmer,
   OU=Development, O=ACME, L=AnyTown, ST=51st, C=UK
matchAllSubjectAltNames flag: true
certpath: LDAPCertStore.engineGetCertificates() basicConstraints: -1
certpath: LDAPCertStore.engineGetCertificates() subject is not null
certpath: LDAPCertStore.engineGetCertificates() after getMatchingCrossCerts(subject,xsel,null),certs.size(): 0
certpath: LDAPCertStore.engineGetCertificates() after getCertificates(subject,CA_CERT,xsel),certs.size(): 0
certpath: LDAPCertStore.engineGetCertificates() after getCertificates(subject,USER_CERT, xsel),certs.size(): 0
certpath: LDAPCertStore.engineGetCertificates() about to getMatchingCrossCerts...
certpath: LDAPCertStore.engineGetCertificates() returning certsPLEASE, PLEASE, PLEASE! tell me what i'm doing wrong! thanks in advance for your help.

AHA! i'm starting to see the light. i took a peek at DS 5.2's access log and
saw that the CertStore.getCertificates() results in a search that uses the
subject dn passed into X509CertSelector.setSubject() as the search filter. it
looks like LDAPCertStore will only consider an entry to match the selector if
both the x509 cert's subject dn and the dn of the object in the ldap directory
with the cert are identical.
my next step is to create a new dit something like ou=Development,
o=ACME in DS 5.2; and create certs with the same fields and see what
happens. brb.
- LDAP
certpath: LDAPCertStore.engineGetCertificates() selector: X509CertSelector: [
Subject: UID=sun_certified,ou=Development,dc=mydomain,dc=com
matchAllSubjectAltNames flag: true
certpath: LDAPCertStore.engineGetCertificates() basicConstraints: -1
certpath: LDAPCertStore.engineGetCertificates() subject is not null
certpath: LDAPCertStore.engineGetCertificates() after getMatchingCrossCerts(subject,xsel,null),certs.size(): 0
certpath: LDAPCertStore.engineGetCertificates() after getCertificates(subject,CA_CERT,xsel),certs.size(): 0
- 0
certpath: X509CertSelector.match(SN: 3ae47d6a5283f115a948134224994d
Issuer: CN=CertGenCAB, OU=FOR TESTING ONLY, O=MyOrganization,
L=MyTown, ST=MyState, C=US
Subject: CN=Sun Certified Java Developer, OU=Development, O=ACME,
L=AnyTown, ST=51st, C=UK)
certpath: X509CertSelector.match: subject DNs don't match
certpath: LDAPCertStore.engineGetCertificates() after getCertificates(subject,USER_CERT, xsel),certs.size(): 0
certpath: LDAPCertStore.engineGetCertificates() about to getMatchingCrossCerts...
certpath: LDAPCertStore.engineGetCertificates() returning certs

Similar Messages

I have created a PDF with mp3 audio clips, the file works on PC's with audio playback (WIndows 7, 8 ) however the audio does not play when hosted on a website or an ipad/tablet computer or smart phone when used with PDF reader

I have created a PDF with mp3 audio clips, the file works on PC's with audio playback (WIndows 7, 8 ) however the audio does not play when hosted on a website or an ipad/tablet computer or smart phone when used with PDF reader

adobe42135678 wrote:
the audio does not play when hosted on a website...
When viewing in what browser?

ExecuteNonQuery doesnt return number of rows affected when used with PL/SQL

ExecuteNonQuery doesn't return number of rows affected when used with PL/SQL but returns -1. The documentation says ExecuteNonQuery method of OracleCommand returns the number of raws affected but when used with PL/SQL, it returns -1 even the update statement successfully executes and affects multiple records with no exeptions thrown.
However, if ExecuteNonQuery is used with update sql statement in the asp.net code it returns number of rows affected correctly. Does anybody know why ExecuteNonQuery behaves like this?
I am using ODP.NET that comes with Oracle Client 11g. The version is 2.111.6.20 of ODP.NET, Oracle database server is 10g.
Marat

You can get the rowcount in the stored procedure via SQL%ROWCOUNT and then pass it out as a parameter.
For example:
SQL> create or replace procedure updatesal(v_deptno in number, v_rowsaff out number) as
2 begin
3 update emp set sal = sal * 5 where deptno = v_deptno;
4 v_rowsaff := SQL%ROWCOUNT;
5 end;
6 /
Procedure created.Cheers

Test runner freezing when used with Dynamics CRM (and other apps) - Both applications freeze and never come back...

We are trying to use test runner with dynamics CRM.
MS Dynamics CRM will freeze and will not respond (even after 10 - 15 minutes). When this happens, the test manager will either freeze or a message will apear saying "waiting for application under test".
We are not recording action recordings...This makes using test manager impossible. It happens consistently, starting with slowing the PC down (mouse moving slowly, slow to load in new screens, drop downs etc) eventually leading to the app freezing.
Tried on windows xp, windows 7 etc on various specs of pcs.

I am experiencing this same issue with
Test runner freezing when used with Dynamics CRM. I notice this was first posted in June of 2010 and so far no
resolution? I was wondering if it could be related to memory issues? Do you have any troubleshooting ideas? The
issue for me seems to be sporadic and I can't
reproduce it every time.
The message I get is "waiting on application under test".
DLM

Quicktime Player with the magic mouse, when used with a bug -

On 10.7 Lion, Quicktime Player with the magic mouse, when used with a bug …
Quicktime Player will not respond, but use the USB mouse with no problem

Message was edited by: b j t

Msi x99 gaming 9 ack does not detect capture card when using with xsplit

msi x99 gaming 9 ack does not detect capture card when using with xsplit
i install every but still it does not work.

Hi
It wasn't hard to find your motherboard version:
http://www.msi.com/support/mb/Z68AGD80_B3.html#down-bios
Since your BIOS is v20.1, it couldn't be G3
Apart from checking BIOS, you can only check motherboard or moth...

Camera is hanging when using with flash

Hi Lenovo Team,
In lenovo vibe x2, camera is hanging when using with flash.Getting "Lenovo snapit isnt responding" error and screen hanged for sometime.after that when tried to open camera "Cannt cannot to camera " error is coming till when restart the phone.
Even tried Factory reset and software update.
Please provide the solution for the above issue.
Thanks,

Hi vijayprabhu,
I just tested the X2 however am not having the issue. I set flash to always on then took a picture using SnapIt however its fine.
Please check if you have the latest firmware S125.
Check out the Community Knowledge Base for hints and tips.
Did someone help you today? Press the star on the left to thank them with a Kudo!
If you find a post helpful and it answers your question, please mark it as an "Accepted Solution"!
X240 | 8GB RAM | 512GB Samsung SSD

AntiAliasing broken when using TLF with HtmlText

Hey Guys, I'm struggling with two issues using TLF within Flash CS5.
1) I'm unable to get Anti-aliasing to work when using TLFTextFields in combination with htmlText.
If I draw a TLFTextField on the stage within Flash IDE and set its Anti-aliasing to Readability then it will anti-alise correctly. If i dynamically change the .text property via AS3, then it still remains crisp, however If i change its .htmlText property Anti-aliasing is disabled and the text looks jagged.
e.g.
var tlfTxt:TLFTextField = new TLFTextField();
tlfTxt.htmlText = "Testing quick";
tlfTxt.antiAliasType = AntiAliasType.ADVANCED;
addChild(tlfTxt);
What is the best way to achieve Anti-aliasing this way?
The same happens if I set a tlfMarkup and specify a TextFlow with styling.
Also how am I able to change weight when using TextFlow? If I have Century Gothic Regular and Bold each embedded within my library, and exported for Actionscript using DF4, which works using the above htmlText example, how do I get Bold to work using the below example?
var tFlow:String = "<TextFlow xmlns='http://ns.adobe.com/textLayout/2008' fontFamily='Century Gothic' fontSize='24'>Testing quick</TextFlow>";
tlfTxt.tlfMarkup = tFlow;
2) I'm unable to get embedded fonts to work when using TextConverter.TEXT_FIELD_HTML_FORMAT
I can successfully use embedded fonts when using TextConverter.importToFlow(markup, TextConverter.PLAIN_TEXT_FORMAT); however as soon as I switch to using TextConverter.TEXT_FIELD_HTML_FORMAT the embedded fonts no longer work. Does anyone know how to overcome this?
Cheers,
Tim

Tim,
I think both issues you're seeing are the same problem, as I believe the htmlText property uses the TextFieldHTML filter. But I haven't been able to reproduce either issue yet.
When I set htmlText using the same font as I specified on the stage (or I omit the font tag entirely) I'm seeing antialiased text. If I use a font in the markup that's different than what I specified on the stage I'm getting a fallback font that's antialiased. The fact that I get a fallback font (even when I specify a font I have installed) suggests to me that it's still trying to use an embedded font after the htmlText property is set.
What happens for you if you do not have a font tag in your HTML? If that looks better there may be a mismatch between font names between the markup and embedding.
Alan

Where do 9i Lite user details reside when used with 9iAS?

Hi there,
Please can someone clarify the following for me. I understand that when using the 9i Lite Mobile Server in standalone mode, all the user definitions live in the mobile server repository schema.
I'm wondering about where this information lives when running the 9i Lite Mobile Server as part of 9iAS. Does the user information HAVE to go into the OID (ie the LDAP directory), or can it remain in the mobile server repository schema?
Thanks in advance for any information,
Simon.

No problem. We are working on publishing extensive resources for Lite on OTN. Feel free to let us know if there are specific areas you would like covered.
--kalle

Inland external usp mouse malfunctioning when used with HP Pavilion dv6-2155dx laptop.

I have a external usb mouse I have been using with my HP laptop for over two years now and it has always worked without a problem. This week it suddenly stopped working properly. Often it does not work when I click on it even after several tries. Due to disability with hands it is too hard to use the pointer on the pad on my laptop. I need to use a mouse.
I am not sure if it is a bug from a recent software update or an issue with my snyaptics program (which is what I suspect). I am older and my computer knowledge is not so good anymore.
What can I do to diagnose to see where the problem is. I cannot afford to take my laptop in for service right now.
Thanks

Hi Richard61,
Thank you for your post, I will do my best to assist you.
I understand that your mouse is not working properly. Here is a document onTroubleshooting Mouse Problems (Windows 7, Vista, XP). Have you tried a different usb mouse? Have you tried it in a different USB port?
It is not the synaptics program as that has to do with Touchpads, not the mouse. If you believe it was an update, you may be able to do a system restore back to when it was working correctly. You could try running MS Fix It to help resolve issues and look for updates. You should also run the HP Support Assistant to aid with updates and resolve issues. Please let me know how it turns out.
Sparkles1
I work on behalf of HP
Please click “Accept as Solution ” if you feel my post solved your issue, it will help others find the solution.
Click the “Kudos, Thumbs Up" on the bottom right to say “Thanks” for helping!

I believe 3GS stereo jack damaged vehicle when used with cassette adapter

I believe the 3GS damaged my automobile stereo through some sort of short in the headphone jack that is related to voice control. I've noticed other threads about headphones and voice control causing strange behaviors on the iPhone 3GS. I'm wondering if anyone else has noticed a problem with a cassette adapter as well. Here is my experience. First, I've owned both a 2G and a 3G prior to my 3GS. That is over 2 years experience with the iPhone platform prior to the issue. During that time I've used the same cassette adapter to output iTunes music to my car stereo system (same vehicle with original stereo during entire time as well…) - which is the OEM stereo that GM installs, as I own a 2K4 Chevy Silverado pickup truck. I’ve had zero issues with the 2G and 3G. Then, the first morning I go out to the truck with the 3GS and plug it in, there is a pop that comes out of the speakers, voice control comes on, then the phone locks up and has to be hard reset. I later notice that one of the backlight bulbs in the stereo is now blown (darkening half the display) and the vehicle speedometer is malfunctioning. The speedo issue might seem surprising, but given how GM wires everything back the stereo system for Onstar monitoring, while I don't know for sure, I assume the stereo received some sort of short from the 3GS and then passed that along to the electronics which control the instruments. The analog GM instrument cluster displays (such as speed) are all managed by electronics that drive small servos that actually move the needles.
Anyhow, again, I feel it was the 3GS that caused this damage - as I'd been using other iPhone products for 2+ years and had no prior problems. Immediately after pluggin the 3GS in the first time the problem occurred. I think the voice control activating intermittently is a symptom of the problem. 8-9 times out of 10, when I plug the cassette adapter into the 3GS, voice control automatically starts, yet not all of the time. I am still using the same cassette adapter, but now plug it into the iPhone before it is inserted into stereo. While I’ve had no other issues with my stereo or instruments, I’m also very careful about not plugging the cassette adapter into the iPhone while the adapter is in the cassette player. I will also note that I'm on 2nd 3GS phone after an exchange for an unrelated issue and the new phone still intermittently activates voice control when the cassette adapter is plugged in. The issue also occurs with a 2nd cassette adapter (of different manufacture) which I use with a stereo in my home. In my mind, there something definitely wrong with the headphone jack on the 3GS and I believe it damaged my vehicle. Is anyone else seeing this issue?
-Calvin

You can try another cassette adapter or try another audio device with the same cassette adapter
Have you considered getting a BlackBerry VM-605? Good prices on Amazon.
Please click the Thumbs Up icon if this comment has helped you!
If your issue is resolved, please click the solution button on the resolution!
Every BlackBerry should have BlackBerry Protect, get it now! | Follow me on Twitter | Bring Back BBM Music!

Why is the Tick Count function slow when used with a .dll but fine with normal lab view code?

when using the Tick Count millisecond timer with a .dll I've written in C, I'm getting some odd timing issues.
When I code the function I want (I'll explain it below in case it helps) in LV and run it as a subVI, feeding it the Tick count as an argument, the function runs quickly, but not quite as quickly as I would like. When I feed this same subVI just an integer constant rather than the Tick Count, it takes about the same amount of time, maybe a tiny bit more on average.
When I bring in my function from a .dll, however, I start to run into problems. When I feed my function an integer constant, it is much faster than my subVI written in LV. When I feel my .dll the Tick Count, however, it slows down tremendously. I'm including a table with the times below:
             | Clock   |   Constant   |
SubVi:   | 450ms | 465ms       |
.dll         | 4900ms| 75ms         |
This is running the function 100,000 times. The function basically shifts the contents of a 2-dimensional array one place. For this function, it probably won't be a huge deal for me, but I plan on moving some of my other code out of LV and into C to speed it up, so I'd really like to figure this out.
Thanks,
Aaron

Hi Aaron,
Thanks for posting the code -- that made things a lot clearer for me. I believe I know what's going on here, and the good news is that it's easy to correct! (You shouldn't apologize for this though, as even an experienced LabVIEW programmer could run into a similar situation.) Let me explain...
When you set your Call Library Function Node to run in the UI Thread you're telling LabVIEW that your DLL is not Thread-safe -- this means that under no circumstances should the DLL be called from more than one place at a time. Since LabVIEW itself is inherently multithreaded the way to work with a "thread-unsafe" DLL is to run it in a dedicated thread -- in this case, the UI thread. This safety comes at a price, however, as your program will have to constantly thread-swap to call the DLL and then execute block diagram code. This thread-swapping can come with a performance hit, which is what you're seeing in your application.
The reason your "MSTick fine behavior.vi" works is that it isn't swapping threads with each iteration of the for loop -- same with the "MSTick bad behavior.vi" without the Tick Count function. When you introduce the Tick Count Function in the for loop, LabVIEW now has to swap threads every single iteration -- this is where your performance issues originate. In fact, you could reproduce the same behavior with any function (not just TIck Count) or any DLL. You could even make your "MSTick fine behavior.vi" misbehave by placing a control property node in the for loop. (Property nodes are also executed in the UI thread).
So what's the solution? If your DLL is thread-safe, configure the call library function node to be "reentrant." You should see a pretty drastic reduction in the amount of time it takes your code to execute. In general, you can tell if your DLL is thread-safe when:
The code is thread safe when it does not store any global data, such as global variables, files on disk, and so on.
The code is thread safe when it does not access any hardware. In other words, the code does not contain register-level programming.
The code is thread safe when it does not make any calls to any functions, shared libraries, or drivers that are not thread safe.
The code is thread safe when it uses semaphores or mutexes to protect access to global resources.
The code is thread safe when it is called by only one non-reentrant VI.
There are also a few documents on the website that you may want to take a look at, if you want some more details on this:
Configuring the Call Library Function Node
An Overview of Accessing DLLs or Shared Libraries from LabVIEW
VI Execution Speed
I hope this helps clear-up some confusion -- best of luck with your application!
Charlie S.
Visit ni.com/gettingstarted for step-by-step help in setting up your system

IPad "misbehaves" when used with a MultiSIM - picks up/rejects phone calls

Hello Cupertino,
iPad 3G misbehaves when used e.g. with a MultiSIM card of T-Mobile Germany.
It is said to pick up phone calls and actively rejects them. Thus the "Main" Mobile Phone (e.g. the iPhone) will ring ONCE then the iPad will pick up and reject the call. (On T-Mobile Network, one cannot disallow phone calls for a specific MultiSIM, all Phones of the same number will ring simultaneously).
This is a really serious and embarassing bug, please fix it with next OS version.
Cheers,
Thomas

No! this is a "bug", because the ipad is connecting via the sim-card in an incorrect way. From day one on Apple always is pressing the fact that the iPad is a "data"-device ONLY and NOT a "phone"-device.
There is no intention of Apple to make the ipad do anything else as "connecting to the internet". That's why there is no textmessage app, no voicemail, no phonestuff on the the ipad. That's perfectly ok! But considering this the iPad misbehaves when connecting to a gprs/umts network because it is connecting showing itself as a PHONE AND DataDevice instead of DATA-ONLY.
THAT IS WRONG, because this automatically triggers the telcom provider to sent voice and messaging connections to this device.
Proof: On a jailbroken iPad it is possible to simply switch the device to the correct CGCLASS="CP" setting. With this setting the iPad only connects as a datadevice (e.g. like a usb-umts-stick) and doesn't answer any incoming non-data-connections.
BUT: I don't want a jailbreak! If want a correct working iPad.
And last but not least: the multi-sim-option (meaning more simcards under the same number) is totaly legitimate and is part of the usagespecs for telecom-networks. It is working perfectly well if (yeah, IF) every device connecting to the network identifies itself correctly with its capabilities.
If a device identifies itself as a phone and it actually isn't, then this device has a serious bug and is not correctly configured to be used in a mixed telcom network. Just because "normaly" everybody uses only one simcard, it is no reason NOT to stick to specs.
This is just sloppy work when porting the iPhone OS to the iPad. Simply forgotten! No big deal, but fix it, because Apple is "killing" a whole generation of german t-mobile users (all iphone contracts older than ~12 months can use their dataplan with free multisimcards from t-mobile on different devices!).
Message was edited by: kinonet

HT3964 noisey dvd drive when using with macbook pro retina?

I bought a new macbook pro retina 15" and used the apple external dvd drive to watch a movie and the drive was extremely loud and vibratory - to thr point of nearly not able to hear the movie. I then tried the same drive with the the same dvd with a macbook air and it did not have this issue. Anyone know how to solve the sound issue when using the dvd drive with a macbook pro retina 15"? Thank you.

Thank you - it is the DVD driver I purchased over a year ago with a Mac book air - I wondered whether they have since updated the DVD driver and therefore wondered about compatibility. I also wondered whether it had to do with the fact that I was on battery power when this happened any further thoughts appreciated.

Airport Express not working when used with Broadband Router **HELP!!!**

Hello.
I have an ethernet network in my house, and I am connected to the network via a Linksys router for Broadband VOIP and internet. I am on a G5 in my home office and want to stream music to my Airport Express for my home stereo in the living room, via the ethernet connection.
The problem is that when using the router in my network, only the Admin Utility sees the base station-- iTunes does not.
If I remove the router from the equation altogether and plug the network ethernet cable directly into the G5, the AX in the other room works just fine and I can get internet on the G5 in the office. The problem is that I need the router to operate my Vonage VOIP phone service and to connect a second computer to the internet as well. The IP address for the router in the home office is "192.168.x.xxx" and when I try moving it to the living room and connecting the AX to it, the Admin Asst doesn't see the AX at all.
When I connect the router to the network in the office, I can use internet on both computers and the VOIP phone service, and the AX Admin Asst. sees the base station from the other room. But again, iTunes does not.
Is there a way to configure the router to see the AX?
Thanks for your help!

Forgive me if this a little off thread, but I have just managed to get this to work and thought it might help people with similar configuration issues (mix manufacturer wireless networks)
I received an Airport Express (FW v. 6.3) for Christmas this year. I already am using a D-Link DI-524 wireless(G) router (Rev A FW 1.03) for my Comcast cable modem in my house (downstairs). What I wanted to do is to add the Airport Express in my office upstairs to my network (client mode) so that I could print from my HP Deskjet 3740 printer and listen to iTunes on my stereo through Airtunes. I have two iBooks (G3) with regular (802.11b) airport cards in them) running Tiger.
I ran into a couple of snags though. I could see the printer in Rendezvou and I could see the airport express in iTunes. I however could not print to the printer or connect to the speakers. I was able to connect to the speakers very intermittenly and then the audio would be disrupted every few seconds.
After a bit of hacking, what I found is that it seems that WPA PSK security doesn't work between the two. I changed the security to 128 bit WEP (ASCII mode). This means that you need an exactly 13 character pass phrase. This is necessary because Apple (and pretty much only Apple) supports 40 bit WEP (5 chars) and D-Link (and the rest of the Windows wireless universe) supports 64 bit WEP (7 chars), but they both support 128 bit WEP. I assume you could set both up as an open network if you were far enough from your neighbors, but I am in a townhouse complex, so I thought I probably better have some security on the network.
Now I only see one network (the one set up on my D-Link router) and I can print to my printer and stream to my stereo through iTunes (without disruption). Seems to work seemlessly now.
I should also mention that I did about three other things. I moved the LAN subnet on the D-link router to 192.168.1.1 (DHCP client address are now between 1.100 and .1.200) I had heard that this was necessary since both routers tried to use the 192.168.0 subnet, but I think this is only necessary in relay mode. I also statically assigned the IP address for the Airport Express. Finally I set up a firewall rule of Source WAN/LAN IP addresses of 192.168.1.100-200 of any protocol from ports 1-20000 to the same destination address range should be allowed to allow for all LAN traffic to be passed. I am very certain this is unnecessary and possible dangerous for security, but I thought I should mention that I did it.
Hope this might help someone.
Michael
iBook G3 (600 MHz) Mac OS X (10.4.3) D-Link DI-524 Router. Motorola Surfboard Cable Modem. Comcast Broadband

Is Sun's LDAP CertStore broken when used with DS 5.2?

Similar Messages

Maybe you are looking for