Issues with CWLMS 3.2 Install Server 2008

Hi,
I am trying to install CWLMS 3.2 on Server 2008 SP2 - I have installed succesfully but when i try and login it asks for username and password which i fill out correctly and then just hangs and does nothing, it seems to be an issue with port 443 or redirection.
Please help
Thanks
Rich

Sounds like CSCtb17186 http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtb17186
that Joe mentioned in https://supportforums.cisco.com/message/676256#676256

Similar Messages

  • Routing Issue with 2 Nics on Windows Server 2008 R2

    Good Day
    My issue is I needed to set up port forwarding for a web server to communicate with our hotels management server to check availability.
    Initially the server has a single Nic configured in the 172.26.1.0 /24 network  , Its default gateway the Switch vlan interface 172.26.1.1
    We have many vlans for all the systems in the hotel and the server also needs to communicate with 3 other servers on different subnets which it does just fine.
    I now added an additional adsl line with a managed router which has an interface of 192.168.10.1 /24 , My servers second NIC has the IP address 192.168.10.2 with its gateway being the 192.168.10.1
    This 192.168.10.0 network is in a L2 Vlan and the rest of the network does not know it exists. It was working fine then just stopped asfter i added a static route to the server , which i did with RRas... I did this as the server could not communicate with
    just one of the servers..
    If i disable the 172.26.1.0 NIC the port forwarding works but then obviously the rest of the network goes down.. I know its a routing issue but am lost
    please help

    Hello,
    using multiple default gateways is not a good idea.
    See details in http://support.microsoft.com/kb/159168/en-us
    Best regards
    Meinolf Weber
    MVP, MCP, MCTS
    Microsoft MVP - Directory Services
    My Blog: http://blogs.msmvps.com/MWeber
    Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
    Twitter:  

  • When installing Server 2008 Datacenter from disc, I get the error message "Windows could not parse or process the unattent answer file for pass [specialize].

    This is a clean install from s disc onto a 3TB GPT drive. This is for testing. I'm not concerned with finding a more practical solution for this installation.
    There is no image or answer file involved. But at the "Completing Installation" phase, I receive this error message about an answer file.
    Has anyone else expecrienced this problem? The only results I find here are regarding actual imaging with answer files.
    EDIT: [Redacted]
    EDIT 2: Since this now happens with every single installation of Server 2008 on this system, I feel the need to keep this open and elaborate on my situation.
    I originally installed Server 2008 on the 2TB partition of this 3TB drive. The partition type was MBR. I reinstalled it (there was a false alarm for malicious software) since it was a fresh install without updates or anything else installed. And for the
    second time, it installed fine.
    I decided to make the most of my 3TB drive and try GPT partitioning. So I went into the command prompt > diskpart > ran "clean" on the disk, then "convert GPT"
    That is when I tried another install of Server 2008 and received this error message about an answer file.
    I decided to convert it back to MBR and get on with what I wanted to test in the first place. So I went into Diskpart again, ran "clean", rand "convert MBR" and started the install. But this resulted in the same error message about an
    answer file.
    I went back to Diskpart, "clean"ed the disk, ran "convert dynamic" to make sure it was dynamic, then tried the install again, with the same result.
    Now, I've tried installing on the disk as GPT, MBR basic and MBR dynamic. I've tried a different installation disc, as well. I got the same result. At this point, I'm going to switch hard drives, but I'm still open to input. Thanks for reading!

    Hi,
    As you swapped the hard disk, whether the same issue occurs again if you redo the same steps?
    I asked "OEM or retail" because of this known issue:
    "Windows could not parse or process the unattend answer file for pass [specialize]" error message when you perform an in-place upgrade in Windows 7 or in Windows Server 2008 R2
    http://support.microsoft.com/kb/2425962
    An answer file may already contain in the disc which causes the issue.
    If issue still exists you can click Shift + F10 during the installation process to see the log. Check if the installation error for detailed information.
    If you have any feedback on our support, please send to [email protected]

  • Issue while connecting to MS SQL Server 2008

    Hi everyone,
    I have not seen any thread that gives me a clue to my problem.
    I have OBIEE 10.1.3.4.0 on Windows.
    I have created an ODBC3.5 Datasource to a SQL Server 2008 and the test connection is successful.
    I have also imported the tables from the SQL Server 2008 into the Physical Layer of the OBIEE Administration tool. However after check-in, my problem begins trying to do an Update Row Count with the following Error message:
    NQODBCSQL_STATE: HY000nQSError: 10058 A general error has occurred.
    nQSError: 43093 An error occured while processingthe EXECUTE PHYSICAL statement.
    nQSError: 16023 The ODBC function has returned an error. The database may not be available, or the network may be down.
    Any suggestion or pointer will be greatly appreciated.

    Reading your post Issue in connecting to MS SQL Server 2008 I guess this thread here can be closed.
    Cheers,
    C.

  • Install Server 2008 DC alongside 2012 DC

    I have a test environment going on and it has Server 2012 DC(Name it 'A') installed. As test, I want to install Server 2008 DC alongside this 'A' server and replicate all data from 'A' server to Server 2008 DC and decommission the 'A' server . And then
    I want to migrate from Server 2008 DC to a new Server 2012 DC. Is this possible? If it is, please let me know the approach to this project. Thanks.  

    You need first to check the following:
    What is your current Domain and Forest Functional levels?
    Is AD Recycle Bin feature enabled?
    If your Domain and Forest Functional levels are Windows Server 2008 then you can add the additional DC and make it a DNS/GC server. Once done, you can transfer FSMO roles and decommission Server A.
    If the your Domain and Forest Functional levels are higher than Windows Server 2008 then, if AD recycle Bin is enabled, you would not be able to lower them more than Windows Server 2008 R2. In this case, you can only add DCs running Windows Server 2008 R2
    or higher. If AD recycle Bin is not enabled then you can lower them to Windows Server 2008.
    The details about how to lower DFL and FFL are mentioned here: http://blogs.technet.com/b/infratalks/archive/2012/12/11/step-by-step-guide-to-lower-active-directory-functional-level.aspx
    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
    Get Active Directory User Last Logon
    Create an Active Directory test domain similar to the production one
    Management of test accounts in an Active Directory production domain - Part I
    Management of test accounts in an Active Directory production domain - Part II
    Management of test accounts in an Active Directory production domain - Part III
    Reset Active Directory user password

  • How to export data with column headers in sql server 2008 with bcp command?

    Hi all,
    I want know "how to export data with column headers in sql server 2008 with bcp command", I know how to import data with import and export wizard. when i
    am trying to import data with bcp command data has been copied but column names are not came.
    I am using the below query:-
    EXEC master..xp_cmdshell
    'BCP "SELECT  * FROM   [tempdb].[dbo].[VBAS_ErrorLog] " QUERYOUT "D:\Temp\SQLServer.log" -c -t , -T -S SERVER-A'
    Thanks,
    SAAD.

    Hi All,
    I have done as per your suggestion but here i have face the below problem, in print statment it give correct query, in EXEC ( EXEC master..xp_cmdshell @BCPCMD) it was displayed error message like below
    DECLARE @BCPCMD
    nvarchar(4000)
    DECLARE @BCPCMD1
    nvarchar(4000)
    DECLARE @BCPCMD2
    nvarchar(4000)
    DECLARE @SQLEXPRESS
    varchar(50)
    DECLARE @filepath
    nvarchar(150),@SQLServer
    varchar(50)
    SET @filepath
    = N'"D:\Temp\LDH_SQLErrorlog_'+CAST(YEAR(GETDATE())
    as varchar(4))
    +RIGHT('00'+CAST(MONTH(GETDATE())
    as varchar(2)),2)
    +RIGHT('00'+CAST(DAY(GETDATE())
    as varchar(2)),2)+'.log" '
    Set @SQLServer
    =(SELECT
    @@SERVERNAME)
    SELECT @BCPCMD1
    = '''BCP "SELECT 
    * FROM   [tempdb].[dbo].[wErrorLog] " QUERYOUT '
    SELECT @BCPCMD2
    = '-c -t , -T -S '
    + @SQLServer + 
    SET @BCPCMD
    = @BCPCMD1+ @filepath 
    + @BCPCMD2
    Print @BCPCMD
    -- Print out below
    'BCP "SELECT 
    * FROM   [tempdb].[dbo].[wErrorLog] " QUERYOUT "D:\Temp\LDH_SQLErrorlog_20130313.log" -c -t , -T -S servername'
    EXEC
    master..xp_cmdshell
    @BCPCMD
      ''BCP' is not recognized as an internal or external command,
    operable program or batch file.
    NULL
    if i copy the print ourt put like below and excecute the CMD it was working fine, could you please suggest me what is the problem in above query.
    EXEC
    master..xp_cmdshell
    'BCP "SELECT  * FROM  
    [tempdb].[dbo].[wErrorLog] " QUERYOUT "D:\Temp\LDH_SQLErrorlog_20130313.log" -c -t , -T -S servername '
    Thanks, SAAD.

  • OS 10.7, SMB Connection, Change to Unicode with Extended Security on Windows Server 2008 Standard

    Hi All,  I've searched Google, and I've also contacted Apple Support with no luck:  I want to implement unicode with extended security on Windows Server 2008 Standard server shared folders so that Lion can connect normally (i.e. Finder->Go->Connect to Server->IP Address or server name) to SMB shares and access files.  I'm lacking information; has anyone actually implemented unicode with extended security?  If so, how?
    Thanks in advance.
    Tom

    Thanks for the reply aorlich. Do you mean enable file sharing on my Mac? With file sharing enabled, I still cannot get to my Windows 7 shares, although the files on my Mac do become available to Windows. Thanks again.

  • Installing Server 2008 using Oracle Virtual Box

    Hey there does anyone know how to install server 2008 as a virtual machine using Oracle Virtual Box?

    Hi,
    Due to Virtual Box is not related to Microsoft product, I suggest you try to look Virtual Box for
    help.
    By the way, I find some articles
    how to install windows server2008 on Virtual Box
    http://www.brighthub.com/computing/windows-platform/articles/31355.aspx
    http://www.youtube.com/watch?v=r0tKw1k2rFs
    Important
    Note: This response contains a reference to a third party World Wide Web site. Microsoft is providing this information as a convenience to you. Microsoft does not control these sites and has not tested any software or information found on these sites; therefore,
    Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. There are inherent dangers in the use of any software found on the Internet, and Microsoft cautions you to make sure that you
    completely understand the risk before retrieving any software from the Internet.
    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

  • Ports functionality after the installing server 2008 R2

    Hi.... i have a problem after installing server 2008 r2 if someone can help me i have 4 usb port on my Pc. after installing the server just 2 ports are working other 2 ports are not working i dont know what should i do..........Thanksss

    Hiya,
    Properly missing a USB hub driver for your PC. You should look at the PC manufacturer page for USB hub drivers. Windows 7 drivers should work for it.

  • Issue With Report Builder After Installing SP3 for SQL 2008 R2

    Hello.  We are experiencing an issue with Report Builder 3.0 since installing SP3 for SQL 2008 R2 over the weekend.  You can no longer launch Report Builder from the Reporting Services URL (http://dicomweb/ReportServer/ReportBuilder/ReportBuilder_3_0_0_0.application
          Server  : Microsoft-HTTPAPI/2.0
          X-AspNet-Version: 2.0.50727
     Application url   :
    http://dicomweb/ReportServer/ReportBuilder/RptBuilder_3/MSReportBuilder.exe.manifest
          Server  : Microsoft-HTTPAPI/2.0
          X-AspNet-Version: 2.0.50727
    IDENTITIES
     Deployment Identity  : ReportBuilder_3_0_0_0.application, Version=10.50.6000.34, Culture=neutral, PublicKeyToken=c3bce3770c238a49, processorArchitecture=x86
     Application Identity  : MSReportBuilder.exe, Version=10.50.6000.34, Culture=neutral, PublicKeyToken=c3bce3770c238a49, processorArchitecture=x86, type=win32
    APPLICATION SUMMARY
     * Online only application.
     * Trust url parameter is set.
    ERROR SUMMARY
     Below is a summary of the errors, details of these errors are listed later in the log.
     * Activation of
    http://dicomweb/ReportServer/ReportBuilder/ReportBuilder_3_0_0_0.application resulted in exception. Following failure messages were detected:
      + File, Microsoft.ReportingServices.ComponentLibrary.Controls.dll, has a different computed hash than specified in manifest.
    COMPONENT STORE TRANSACTION FAILURE SUMMARY
     No transaction error was detected.
    WARNINGS
     There were no warnings during this operation.
    OPERATION PROGRESS STATUS
     * [10/15/2014 9:35:56 AM] : Activation of
    http://dicomweb/ReportServer/ReportBuilder/ReportBuilder_3_0_0_0.application has started.
     * [10/15/2014 9:36:29 AM] : Processing of deployment manifest has successfully completed.
     * [10/15/2014 9:36:29 AM] : Installation of the application has started.
     * [10/15/2014 9:36:31 AM] : Processing of application manifest has successfully completed.
     * [10/15/2014 9:36:35 AM] : Found compatible runtime version 2.0.50727.
     * [10/15/2014 9:36:35 AM] : Detecting dependent assembly Sentinel.v3.5Client, Version=3.5.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil using Sentinel.v3.5Client, Version=3.5.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a,
    processorArchitecture=msil.
     * [10/15/2014 9:36:35 AM] : Detecting dependent assembly System.Data.Entity, Version=3.5.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089, processorArchitecture=msil using System.Data.Entity, Version=3.5.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089,
    processorArchitecture=msil.
     * [10/15/2014 9:36:35 AM] : Request of trust and detection of platform is complete.
    ERROR DETAILS
     Following errors were detected during this operation.
     * [10/15/2014 9:36:43 AM] System.Deployment.Application.InvalidDeploymentException (HashValidation)
      - File, Microsoft.ReportingServices.ComponentLibrary.Controls.dll, has a different computed hash than specified in manifest.
      - Source: System.Deployment
      - Stack trace:
       at System.Deployment.Application.ComponentVerifier.VerifyFileHash(String filePath, Hash hash)
       at System.Deployment.Application.ComponentVerifier.VerifyFileHash(String filePath, HashCollection hashCollection)
       at System.Deployment.Application.ComponentVerifier.VerifyComponents()
       at System.Deployment.Application.DownloadManager.DownloadDependencies(SubscriptionState subState, AssemblyManifest deployManifest, AssemblyManifest appManifest, Uri sourceUriBase, String targetDirectory, String group, IDownloadNotification
    notification, DownloadOptions options)
       at System.Deployment.Application.ApplicationActivator.DownloadApplication(SubscriptionState subState, ActivationDescription actDesc, Int64 transactionId, TempDirectory& downloadTemp)
       at System.Deployment.Application.ApplicationActivator.InstallApplication(SubscriptionState& subState, ActivationDescription actDesc)
       at System.Deployment.Application.ApplicationActivator.PerformDeploymentActivation(Uri activationUri, Boolean isShortcut, String textualSubId, String deploymentProviderUrlFromExtension, BrowserSettings browserSettings, String& errorPageUrl)
       at System.Deployment.Application.ApplicationActivator.ActivateDeploymentWorker(Object state)
    COMPONENT STORE TRANSACTION DETAILS
     No transaction information is available.

    Hi DMcGarveyt,
    This is an known issue in SSRS 2008 R2 SP3. For this issue, Microsoft has published an article addressing this issue. It is not planning to release a fix for this defect. But there's workarounds for this issue. Please refer to the link below:
    Report Builder of SQL Server 2008 R2 Service Pack 3 does not launch.
    If you have any question, please feel free to ask.
    Best Regards,
    Simon Hou

  • AppFabric crashes IIS Manager when Powershell 4 is installed (Server 2008 R2 SP1)

    When Powershell 4 is installed on a Server 2008 R2 SP1 box with AppFabric 1.1, IIS Manager will fail.
    If you go to IIS Manager and plus open the node for your server (to look at your sites or app pools) you get an error like the following:
    Description:
      Stopped working
    Problem signature:
      Problem Event Name: CLR20r3
      Problem Signature 01: inetmgr.exe
      Problem Signature 02: 7.5.7600.16385
      Problem Signature 03: 4a5bd0a5
      Problem Signature 04: System.Management.Automation
      Problem Signature 05: 1.0.0.0
      Problem Signature 06: 4ce7c787
      Problem Signature 07: 106d
      Problem Signature 08: a6
      Problem Signature 09: PUYL1YSRBZLI4302TJNBZ1HF4QQMYKVP
      OS Version: 6.1.7601.2.1.0.272.7
      Locale ID: 1033
    If you look at the application event log, you will also see:
    IISMANAGER_CRASH
    IIS Manager terminated unexpectedly.
    Exception:System.Management.Automation.CmdletInvocationException: The method or operation is not implemented. ---> System.NotImplementedException: The method or operation is not implemented.
       at Microsoft.ApplicationServer.Management.Tools.PowershellHost.NoConsolePSRawUserInterface.get_BufferSize()
       at System.Management.Automation.Internal.Host.InternalHostRawUserInterface.get_BufferSize()
       at Microsoft.PowerShell.Commands.Internal.Format.ConsoleLineOutput.get_ColumnNumber()
       at Microsoft.PowerShell.Commands.Internal.Format.OutCommandInner.ProcessOutOfBandPayload(FormatEntryData fed)
       at Microsoft.PowerShell.Commands.Internal.Format.OutCommandInner.ProcessPayload(FormatEntryData fed, OutputContext c)
       at Microsoft.PowerShell.Commands.Internal.Format.OutCommandInner.ProcessObject(PSObject so)
       at Microsoft.PowerShell.Commands.Internal.Format.OutCommandInner.ProcessRecord()
       at Microsoft.PowerShell.Commands.Internal.Format.FrontEndCommandBase.ProcessRecord()
       at System.Management.Automation.CommandProcessor.ProcessRecord()
       --- End of inner exception stack trace ---
       at System.Management.Automation.Internal.PipelineProcessor.DoStepItems(Object input, Hashtable errorResults, Boolean enumerate)
       at Microsoft.PowerShell.Commands.Internal.Format.CommandWrapper.Process(Object o)
       at Microsoft.PowerShell.Commands.Internal.Format.SubPipelineManager.Process(PSObject so)
       at Microsoft.PowerShell.Commands.Internal.Format.OutputManagerInner.ProcessRecord()
       at Microsoft.PowerShell.Commands.Internal.Format.FrontEndCommandBase.ProcessRecord()
       at System.Management.Automation.CommandProcessor.ProcessRecord()
    If you then uninstall AppFabric 1.1, everything starts working again.  I need Powershell 4 with AppFabric 1.1.  Any ideas?
    I wonder if the below breaking change in Powershell 4 is causing the issue:
    In Windows PowerShell 4.0, if a module uses the DefaultCommandPrefix key in its manifest, or if the user imports a module with the Prefix parameter, the ExportedCommands property of the module shows the commands in the module with the prefix. When you run
    the commands by using the module-qualified syntax ModuleName\CommandName, the command names must include the prefix.

    We didn't have this issue with Powershell 4.0, but with Server 2008 R2 SP1 and AppFabric 1.1. The solution for us was to install the
    Upgrade Readiness Tool. No problems with Inetmgr and Clr20R3 after the hotfix was applied. 

  • Permissions Issue saving to Home Directory on Server 2008 R2

    I have a lab of 10.5 iMacs connected to our domain through active directory. When the students log in, their network home directories (hosted on Win Server 2008 R2) mount on the desktop. The students are having permissions issues when saving to these directories. For some odd reason, the students can save files created in Word, but not files created in Excel. We have separate shares on the same server for our teachers - Hand In and Hand Out. The students are unable to copy files from the Hand Out folders to their home directories because they get the same permissions error message.
    Last year as a work around to this issue we gave the students full control of their home directories. We do not want to continue doing this because then the students can change the permissions on their home directories. The standard in our district is to give the students "modify" control.
    We have 10.4 macs set up in this exact same manner and we do not have any permissions problems. This only seems to affect the 10.5 macs. Thanks!

    Hi Rolf,
    I understand the confusion.
    So the answers to your questions first.
    It was suggested to me to get CR2008 but I heard 2008 will not be supported much longer, is that correct?
    Patch support ends for CR 2008 on December 31, 2015.
    If I install 2008 will I use a different reference in my application instead of 11.5.3700.0 ?
    Yes. Crystal Reports 2008 is version 12.0 product and all CR 2008 assemblies are of 12.0 version. So your references would be 12.0
    What needs to be installed on the 2008 server and what will the IIS setting be (running as 32 bit)?
    .CR 2008 runtimes (of appropriate SP) should be installed on the server. CR 2008 only has 32 bit runtimes so make sure IIS is running under 32 bit.
    Morever,
    Few things to do while migrating on dev machine.
    - Open the project in either VS 2005 or VS 2008.
    - Remove all earlier references (11.x).
    - Assign new CR references (12.0) and recompile the app.
    - Not to forget, upgrading your reports to CR 2008 by opening them in CR 2008 designer and checking if everything is working as expected.
    - Bhushan
    Senior Engineer
    SAP Active Global Support
    Follow us on Twitter
    Got Enhancement ideas? Try the SAP Idea Place
    Getting started and moving ahead with Crystal Reports .NET applications.

  • ACS any Version with Domain Controller on Windows Server 2008 R2 64bit

    Hi All
    Is there currently any ACS version working with Windows Server 2008 R2 domain controllers?
    Our server stuff has recently upgraded the Domain Controllers to 2008r2 and turned off the 2003 servers. This didn't make our ACS 4.1.4 really happy.
    I've read now serveral posts regarding issues with ACS and Server 2008r2 and hope to find a solution (besides switching to LDAP, yukk).
    Thanks
    pato

    Hi AllIs there currently any ACS version working with Windows Server 2008 R2 domain controllers?Our
    server stuff has recently upgraded the Domain Controllers to 2008r2 and
    turned off the 2003 servers. This didn't make our ACS 4.1.4 really
    happy.I've read now serveral posts regarding issues with ACS and
    Server 2008r2 and hope to find a solution (besides switching to LDAP,
    yukk).Thankspato
    Hi Pato,
    Just check out the below link hope that help.
    http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2/release/notes/ACS42_RN.html
    As per the link it says The support for Windows Server 2008 is applicable for ACS 4.2 Patch 4 onwards.
    Hope to Help !!
    Remember to rate the helpful post
    Ganesh.H

  • Problem with restore database in sql server 2008

    hi,,,when i want to restore database from a .bak file i see this error
    TITLE: Microsoft SQL Server Management Studio
    Restore failed for Server 'ALI-PC'.  (Microsoft.SqlServer.SmoExtended)
    For help, click: http://go.microsoft.com/fwlink?ProdName=Microsoft+SQL+Server&ProdVer=10.50.1447.4+((KJ_RTM).100213-0103+)&EvtSrc=Microsoft.SqlServer.Management.Smo.ExceptionTemplates.FailedOperationExceptionText&EvtID=Restore+Server&LinkId=20476
    ADDITIONAL INFORMATION:
    System.Data.SqlClient.SqlError: The database was backed up on a server running version 10.50.4000. That version is incompatible with this server, which is running version 10.00.1600. Either restore the database on a server that supports the backup, or use a
    backup that is compatible with this server. (Microsoft.SqlServer.Smo)
    For help, click: http://go.microsoft.com/fwlink?ProdName=Microsoft+SQL+Server&ProdVer=10.50.1447.4+((KJ_RTM).100213-0103+)&LinkId=20476
    BUTTONS:
    OK
    i checked overwrite the existing database(WUTH REPLACE) in option,but i cant restore again,,,please help me

    Hi,
    You need to install SQL Server 2008 R2 Service Pack 2
    Download
    http://www.microsoft.com/en-us/download/details.aspx?id=11093, you are currently running the RTM and the backup was from Version 10.50.4000 and your attempting to restore to version 10.00.1600.
    To find your current SQL Version open a New Query and paste the following then execute
    SELECT @@VERSION AS 'SQL Server Version
    Reference:
    http://sqlserverbuilds.blogspot.com/
    http://support.microsoft.com/kb/321185
    http://technet.microsoft.com/en-us/library/ms177512.aspx
    Cheers,
    -Ivan

  • Issue with one of the Managed server while enabling SSL.__ Issue Resovled

    Weblogic version:wls 8.1sp6
    SSL: internal
    Environment:
    1 AdminServer and 2 Managed servers. Admin and M1 are on same host. M2 is on different host. We have enabled SSL on M1 & M2 only. Configuration of M1 & M2 are identical. After restarting the servers M1 has no issue with SSL but M2 throws javax.net.ssl.SSLKeyException as shown below,
    <Aug 4, 2008 12:29:01 PM BST> <Notice> <WebLogicServer> <BEA-000360> <Server started in RUNNING mode>
    <Aug 4, 2008 12:29:02 PM BST> <Info> <WebLogicServer> <BEA-000213> <Adding address: 10.96.201.249 to licensed client list>
    <Aug 4, 2008 12:29:09 PM BST> <Notice> <Security> <BEA-090171> <Loading the identity certificate stored under the alias wpy-euq02 from the JKS keystore file /home/lonwpyq/ssl_cert/WPY_PAYROLLSOLUTIONSKeystore.jks.>
    <Aug 4, 2008 12:29:09 PM BST> <Notice> <Security> <BEA-090170> <Loading the private key stored under the alias wpy-euq02 from the JKS keystore file /home/lonwpyq/ssl_cert/WPY_PAYROLLSOLUTIONSKeystore.jks.>
    <Aug 4, 2008 12:29:09 PM BST> <Warning> <Security> <BEA-090773> <The certificate chain received from lonlxwebhost99.lehman.com - 10.71.129.99 contained a V3 certificate which key usage constraints forbid its key use by the key agreement algorithm.>
    <Aug 4, 2008 12:29:09 PM BST> <Warning> <Security> <BEA-090773> <The certificate chain received from lonlxwebhost99.lehman.com - 10.71.129.99 contained a V3 certificate which key usage constraints forbid its key use by the key agreement algorithm.>
    <Aug 4, 2008 12:29:09 PM BST> <Warning> <Security> <BEA-090773> <The certificate chain received from lonlxwebhost99.lehman.com - 10.71.129.99 contained a V3 certificate which key usage constraints forbid its key use by the key agreement algorithm.>
    <Aug 4, 2008 12:29:09 PM BST> <Error> <Cluster> <BEA-000141> <TCP/IP socket failure occurred while fetching statedump over HTTP from -6401422690190304510S:lonlxwebhost99:[16544,16544,16042,16042,16544,16042,-1,0,0]:etg:lonwpyq_16543_1.
    javax.net.ssl.SSLKeyException: [Security:090773]The certificate chain received from lonlxwebhost99.lehman.com - 10.71.129.99 contained a V3 certificate which key usage constraints forbid its key use by the key agreement algorithm.
    at com.certicom.tls.interfaceimpl.TLSConnectionImpl.fireException(Unknown Source)
    at com.certicom.tls.interfaceimpl.TLSConnectionImpl.fireAlertSent(Unknown Source)
    at com.certicom.tls.record.handshake.HandshakeHandler.fireAlert(Unknown Source)
    at com.certicom.tls.record.handshake.HandshakeHandler.fireAlert(Unknown Source)
    at com.certicom.tls.record.handshake.ClientStateReceivedServerHello.handle(Unknown Source)
    at com.certicom.tls.record.handshake.HandshakeHandler.handleHandshakeMessage(Unknown Source)
    at com.certicom.tls.record.handshake.HandshakeHandler.handleHandshakeMessages(Unknown Source)
    at com.certicom.tls.record.MessageInterpreter.interpretContent(Unknown Source)
    at com.certicom.tls.record.MessageInterpreter.decryptMessage(Unknown Source)
    at com.certicom.tls.record.ReadHandler.processRecord(Unknown Source)
    at com.certicom.tls.record.ReadHandler.readRecord(Unknown Source)
    at com.certicom.tls.record.ReadHandler.readUntilHandshakeComplete(Unknown Source)
    at com.certicom.tls.interfaceimpl.TLSConnectionImpl.completeHandshake(Unknown Source)
    at com.certicom.tls.record.WriteHandler.write(Unknown Source)
    at com.certicom.io.OutputSSLIOStreamWrapper.write(Unknown Source)
    at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:66)
    at java.io.BufferedOutputStream.flush(BufferedOutputStream.java:124)
    at java.io.FilterOutputStream.flush(FilterOutputStream.java:123)
    at weblogic.net.http.HttpURLConnection.writeRequests(HttpURLConnection.java:122)
    at weblogic.net.http.HttpURLConnection.getInputStream(HttpURLConnection.java:322)
    at weblogic.cluster.HTTPExecuteRequest.connect(HTTPExecuteRequest.java:73)
    at weblogic.cluster.HTTPExecuteRequest.execute(HTTPExecuteRequest.java:121)
    at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:224)
    at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:183)>
    Please let me know where I am going wrong. Thnx in advance
    Message was edited by:
    Shashi_sr

    Solution given by BEA Engineer:
    <Warning> <Security> <BEA-090773> <The certificate chain received from lonlxwebhost99.lehman.com - 10.71.129.99 contained a V3 certificate which key usage constraints forbid its key use by the key agreement algorithm.>
    The reason for this was
    The CA Certificate was missing a required bit (according to RFC 3280).
    keyEncipherment bit is not in the KeyUsage and KeyUsage is marked as critical.
    As per RFC:
    The keyEncipherment bit is asserted when the subject public key is
    used for key transport. For example, when an RSA key is to be
    used for key management, then this bit is set.
    According to RFC3280, when the key will be used to encrypt other keys that are send over the wire ("key transport") the keyEncipherment bit of the KeyUsage extension must be set. If the KeyUsage extension is critical, the SSL certificate validation will check that the key can be used in the key agreement. That is, that the key can be used to encrypt the symmetric public key.
    Your KeyUsage only contains the following bits:
    [4]: ObjectId: 2.5.29.15 Criticality=true KeyUsage [
    DigitalSignature
    Key_CertSign
    Crl_Sign
    Since it is marked Critical, it MUST have the keyEncipherment bit.
    Otherwise, it should not be marked as Critical.
    So the three solutions that should work are
    1) Remove keyUsage
    2) Don't mark keyUsage as critical
    3) If keyUsage is critical, make sure keyEncipherment bit is set.

Maybe you are looking for

  • 10g installation error on Solaris 10 X86

    Dear All, i have downloded a 10g( solaris x86) from oracle site to install Solaris 10 x86.. After following installation document steps when i execute command ./runinsta follwing error occurs. **********************************output*****************

  • Weblogic Server 10.3.6, Forms 11.1.2, Sessions not timing out

    On Weblogic Server 10.3.6, Forms 11.1.2, a Forms application contains a query that occasionally takes a long time to complete. Users of the application may close their browser before the query completes; however, their original session remains open c

  • Replication of utility/helper classes in JAR/WAR.

    Hello folks, I have recently learned the class loader hierarchy that is employed in the WebLogic server. Previously, I was including the local component interfaces of my EJBs in the EJB JAR file as well as the web application WAR file. However, since

  • Publishing TOC in Word Doc

    I have a module that includes a table of contents that I would like to publish as a Word doc. When I publish it, the slides are missing the table of contents. Is there a way to include the table of contents in the published slides? Darin

  • Mac Client Enrollment Not Working

    I'm trying to enroll a MAC OSX 10.9.2 client.  My environment is Server 2012 R2 and Configuration Manager 2012 R2.  I get the following error when running the CMEnroll command: SSL Connection failed.  HTTP Response code is 500 and reason is Internal