Java and Directory server

Dear members,
I am recently going to start a project that will require a browser to authenticate with a directory server (Radius server). I am doing research about feasibility.
I would like suggestions from you guys about the protocol to be used and the resources to be utilized. Please let me know any online resources if you have created or you know.
Thanks,
Di Ke.

Hi,
could you please explain, what you expect from authenticate against Sun Java Directory Server?
IYou do not need openldap libraries, you can link with libldap Solaris implementation, libinconv and openssl.
Stefan

Similar Messages

Installing Sun Java System Directory Server on Windows XP

Hello Everyone,
I want to install the Sun Java System Directory Server 6.2 on Windows XP platform. I tried to download the zip file, but it is giving me the options only for Windows 2000 Server and Windows 2003 Server. My question is, is there a binary for Windows XP? If yes, could someone please point me to the location and the installation instructions.
Thanks in advance.
Thanks,
Ranjith

hi
i dont see DS 6.2 download from sun.com infact you can try 6.3 which is compatible for XP.

Installing Sun Java System Directory Server on Linux Ent.

Hi,
I tried to install Sun Java System Directory Server on Linux on Redhat Enterprise Linux AS, but I faced some problems.
I just want to know if there is any pre-requisites for installing this product on Linux.
Thanks
Sadiq

Hello
Which problem did you have encountered installing the DS on Linux AS.
Currently I want to install SunOne DS V5.2 on Redhat Linux AS 2.1 and encounter several configuration issues
Thanks in advance,
Andrew

Installing Sun Java System Directory Server on RHEL 4

Hi All,
I have downloaded this ds[1].5.2.P4.linux.full.tar.gz for linux.
While installing Sun Java System Directory Server on RHEL 4.
I am getting this error
Installing Directory Server
|-1%--------------25%-----------------50%-java.io.FileNotFoundException: /opt/SunOneDirectoryServer/setup/admin/ns-common-sc hema.conf (Not a directory)
at java.io.FileOutputStream.open(Native Method)
at java.io.FileOutputStream.<init>(FileOutputStream.java:179)
at java.io.FileOutputStream.<init>(FileOutputStream.java:131)
at com.sun.install.products.ZipUnit.install(ZipUnit.java:354)
at com.sun.install.products.InstallComponent.performInstallation(InstallComponent.java:1223)
at com.sun.install.products.InstallNode.startInstall(InstallNode.java:878)
at com.sun.install.products.InstallComponent.performInstallation(InstallComponent.java:1220)
at com.sun.install.products.InstallNode.startInstall(InstallNode.java:878)
at com.sun.install.products.InstallComponent.performInstallation(InstallComponent.java:1220)
at com.sun.install.products.InstallNode.startInstall(InstallNode.java:878)
at com.sun.install.products.InstallComponent.performInstallation(InstallComponent.java:1220)
at com.sun.install.products.Product.performInstallation(Product.java:641)
at com.sun.install.tasks.ProductTask.perform(ProductTask.java:191)
at com.sun.wizards.core.Sequence.perform(Sequence.java:336)
at com.sun.wizards.core.SequenceManager.run(SequenceManager.java:226)
at java.lang.Thread.run(Thread.java:534)
----------------75%--------------100%|
Can anyone please help on this
Thanks in Advance

It looks like your archive is corrupted.
I would suggest that you download a new copy, and even better that you use the most recent version of Directory Server (6.2, although it is not yet on the download page -it should be by the end of the week-, 6.1 is available through the Enterprise Edition).
Regards,
Ludovic.

Installing Sun Java System directory Server 5.2 P4 Patch

Hi,
While Installing using Sun Java System Directory Server 5.4 P4 patch using install.bat
i am getting error such as "*Cannot find either nsbasesys.zip or nsbasesys.zip.zip*"

Hi Aswi,
Looking at your [other post|http://forums.sun.com/thread.jspa?threadID=5342178&tstart=30] i asume you are installing this patch on Windows?
I haven't got any experience regarding DS on Windows, but looking at the install README i couldn't help noticing this part:
On windows copy d52diu.zip, nsbase.zip and nsbasesys.zip file
                to the server root.
          - uncompress nsbase.zip file
          - on Windows platforms, uncompress nsbasesys.zip into $SystemRoot/SYSTEM32 directory
                - In case of Windows platform, uncompress d52diu.zipGood luck!
Edited by: dbuurman on Oct 30, 2008 7:36 AM
Edited by: dbuurman on Oct 30, 2008 7:37 AM

OVD - Integration with Sun Java system Directory Server

Hi All,
I have the following iusse, i'm trying to configure OVD 11.1.1.3 with Sun Java System Directory Server adapter for enterprise user security but when I import Oracle ldif schema file (iPlanetSchema.ldif) I have the following error:
add attributetypes:
+( 1.3.6.1.4.1.42.2.27.8.1.5 NAME 'pwdCheckSyntax' EQUALITY integerMatch SYNTAX '1.3.6.1.4.1.1466.115.121.1.27' SINGLE-VALUE )+
modifying entry cn=schema
ldap_modify: Type or value exists
ldap_modify: additional info: attribute type pwdCheckSyntax: Does not match the OID "1.3.6.1.4.1.42.2.27.8.1.5". Another attribute type is already using the name or OID.
In the default Sun DS schema there is attribute with the same OID:
+../config/schema/00ds6pwp.ldif:+
attributeTypes: ( 1.3.6.1.4.1.42.2.27.8.1.5 NAME 'pwdCheckQuality' DESC 'Level of required quality' SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 X-DS-USE 'internal' SINGLE-VALUE X-ORIGIN 'Password Policy for LDAP Directories Internet Draft' )
Is it possible?
I'm reading the following document:
http://download.oracle.com/docs/cd/E12839_01/oid.1111/e10046/adv_integrate.htm#CACIIIEG
Thanks in advance,
Zaic

Thank you very much. The name of the file is actually C:\WINDOWS\system32\productregistry.
I renamed that to productregistry BACKUP and I can now install the LDAP. Man, I should have posted this a week and a half ago when I first started having this issue. It would have prevented a few forehead dents from banging my head on the keyboard.
thanks again

Sun Java System Directory Server 5.2

Hi,
We were informed by a third party that we can download Sun Java System Directory Server 5.2 SP 1 from the Sun downloads area. However, we couldn't find 5.2 Service Pack 1. We did find that Directory Server 5 2005Q4 (5.2 patch 4) is the only one available for download.
Is 5.2 patch 4 equivalent to 5.2 Service Pack 4?
Is there such thing as Directory Server 5.2 Service Pack 1?
We saw that 5.1 had multiple Service Packs available for download, will the 5.2 Service Packs be made available for downloading?
Cheers,
Cate

Sun has changed the terminology for micro releases from Service Packs (5.1 release) to patched versions (5.2 release).
Therefore Directory Server 5.2 patch4 is the latest update of Directory Server 5.2 release (would have been called Service Pack with the former terminology).
Only the most recent version is available for download from the Sun Downloads site..
But we've never released 5.2patch1, as far as I remember.

OAM and Directory Server Interaction

I am in the middle of continued fact finding for implementing OAM. One question that has come up is how does OAM use the directory server it is configured to connect to. We would like to use AD as our authentication source but the word is Hell No if OAM is going to try to write data back into the directory server or store data in the directory server as our AD Admins are mandating that OAM will only be given read only, normal user level rights even if it requires write privileges and directory admin rights to function. I have search the manuals and have yet to find a really good explanation of how it works and uses the Database Schema and Directory Server. I suspect it is read only but I need to know ahead of time so I can make everyone aware that were going to have to run multiple directory systems due to the imposed limitation on AD access.

Anybody??? I really need help with this....

Installing Iplanet web server and directory server behind a firewall

When installing iplanet web server and directory server behind a firewall - should the interal ip address be used or the external ip address?

Hello,
When you are installing iplanet web server behind a firewall,you should use the internal ip address in the firewall.
1. The external ip address connection to the Internet. The type of IP address used?dynamic (commonly used for standard
modems) or static (commonly used for cable modems) is dictated by the ISP to which you connect and the type of service it provides.
2. The internal ip adress connection. This connection must be a static IP assignment, and it must be assigned by you.
obviously it depends on the type of firewall setup you have.
Thanks
Selva

Good Java System Directory Server book?

Does anyone know of a good book (or books) for getting up to speed on the Sun Java System stack? I am migrating from Linux and Windows-based apps to the Sun stack and need to hit the books hard to get up to speed, but can't find much of anything newer than 2002 on Amazon.
Specifically looking for:
- Directory Server
- Web Application server
- Messaging Server
- JMS
Anyone have any ideas?

Well, the first place I go is http://docs.sun.com where I can either search or browse the html versions or download the PDFs of the product manuals. Beyond that I do like Michael Haines and Tom Bialaski's LDAP in the Solaris Operating Environment: Deploying Secure Directory Services book. It came out in 2004 and covers Directory Server 5.2 (I think it was patch 2 then, now we run patch 4 here...)

Installing Access Manager and Directory Server

Can I install the Access Manager 2005Q4 without installing the directory server?
The products selected for installation have dependency requirements or installation options as indicated below.
Sun Java(TM) System Directory Server 5 2005Q4
------------------------------------------------------------------------

Everytime I click the Access Manager in the JES 2005Q4installer the directory server would click itself. Unchecking this prompted me for a remote repository which worked.
I wasn't able to get the install to complete with the state file, it stopped before configuring access manager.

Directory Server 6.3.1 and Directory Server 7.0 agent module

Hello Folks-
I am having a strange issue with my directory servers. I had three directory server replicas and they were all on 6.3.1 installed with the zip distribution. One of the directory server was a vmware virtual machine running on Solaris Update 8 and after a power failure I could not start or recover the Virtual Machine itself. Long story short, I ended up installing a new DS with 7.0 version (with zip distribution). The installation went very smoothly, had no problems starting the server and creating an initial instance, top level baseDN, etc.
I somehow unregistered the older non-working Directory Server from first server's DSCC and wanted to include this new one. So in my Directory Servers tab in DSCC, I have all three listed like this: notice the third one
Server
ldap1:389
ldap2:389
ldap3:389 (server not registered)
So having the same host name and same instance, when I try to register an "existing server", I get the following error:
" The DSCC agent module is not registered on host ldap3. Verify that the agent module is installed using the command dsccsetup status on host ldap3. If the agent module is installed register it using the command dsccsetup cacao-reg"
So I went to the third host and did the following:
# dsccsetup status
DSCC Agent is registered in Cacao
Cacao uses a custom port number 21162
DSCC Registry has been created
Path of DSCC registry is /jes/ds/dsee7/var/dscc/ads
Port of DSCC registry is 3998
# dsccsetup cacao-reg
DSCC Agent is already registered.
So what is the problem? Why cant I register my new server and create replication agreements with the others?
Please let me know if you have more information
Thanks.
Deniz.

Anybody??? I really need help with this....

Setup Java system directory server 6 client for user authentication

I am trying to set up a native LDAP client for sun directory server 6 for network based user authentication. I checked the sun doc for naming service (LDAP) and the documentation are for setting up LDAP client for directory server 5. Is there any documentation for setting up LDAP client for directory server 6? Or the documents for setting LDAP client for directory server 5 is still good for 6? Particularly, I want to use SSL communication between server and client.

Hi,
could be one of the other 'bad jokes' of DS/ldapclient because the documentation describes a lot of stuff about profiles etc. but: you need some special schema files to use the whole stuff and they are not installed with Solaris or DS (and they include the NisDomainObject). I had to search for them in the internet. They are also printed in the documentation. Save them in your server's config/schema directory as i.e. 61DUAConfigProfile.ldif and 62nisDomain.ldif and try idsconf again (maybe you have to cleanup something).
I test and prepare DS6 here, and we will use it in production too. I hadn't any problem with it and it has some important advantages over DS5.2. But we won't have a huge directory so I can't tell you anything more about it.
Regards
Jochem Ippers
Here are the ldifs:
61DUAConfigProfile.ldif:
dn: cn=schema
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.0 NAME 'defaultServerList' DESC 'Default LDAP server host address used by a DUA' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.1 NAME 'defaultSearchBase' DESC 'Default LDAP base DN used by a DUA' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.2 NAME 'preferredServerList' DESC 'Preferred LDAP server host addresses to be used by a DUA' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.3 NAME 'searchTimeLimit' DESC 'Maximum time in seconds a DUA should allow for a search to complete' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.4 NAME 'bindTimeLimit' DESC 'Maximum time in seconds a DUA should allow for the bind operation to complete' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.5 NAME 'followReferrals' DESC 'Tells DUA if it should follow referrals returned by a DSA search result' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.6 NAME 'authenticationMethod' DESC 'A keystring which identifies the type of authentication method used to contact the DSA' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.7 NAME 'profileTTL' DESC 'Time to live, in seconds, before a client DUA should re-read this configuration profile' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.14 NAME 'serviceSearchDescriptor' DESC 'LDAP search descriptor list used by a DUA' EQUALITY caseExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.9 NAME 'attributeMap' DESC 'Attribute mappings used by a DUA' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.10 NAME 'credentialLevel' DESC 'Identifies type of credentials a DUA should use when binding to the LDAP server' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.11 NAME 'objectclassMap' DESC 'Objectclass mappings used by a DUA' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.12 NAME 'defaultSearchScope' DESC 'Default search scope used by a DUA' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.13 NAME 'serviceCredentialLevel' DESC 'Identifies type of credentials a DUA should use when binding to the LDAP server for a specific service' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.15 NAME 'serviceAuthenticationMethod' DESC 'Authentication method used by a service of the DUA' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'user defined' )
objectClasses: ( 1.3.6.1.4.1.11.1.3.1.2.4 NAME 'DUAConfigProfile' SUP top STRUCTURAL DESC 'Abstraction of a base configuration for a DUA' MUST ( cn ) MAY ( defaultServerList $ preferredServerList $ defaultSearchBase $ defaultSearchScope $ searchTimeLimit $ bindTimeLimit $ credentialLevel $ authenticationMethod $ followReferrals $ serviceSearchDescriptor $ serviceCredentialLevel $ serviceAuthenticationMethod $ objectclassMap $ attributeMap $ profileTTL ) X-ORIGIN 'user defined' )
62nisDomain.ldif:
dn: cn=schema
attributeTypes: ( 1.3.6.1.1.1.1.30 NAME 'nisDomain' DESC 'NIS domain' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'user defined' )
objectClasses: ( 1.3.6.1.1.1.2.15 NAME 'nisDomainObject' SUP top STRUCTURAL MUST nisDomain X-ORIGIN 'user defined' )

Unable to use SSL between Access Manager and Directory Server

I am trying to set up Access Manager to use SSL when communicating with Directory Server. Access Manager 7 is running under Sun Web Server 6.1. I have configured Directory Server to use SSL using a Self-Signed CA and have imported the CA certificate into the certificate database for Web Server. When I change the Access Manager configuration as specified in the Admin Guide to use SSL and restart the Web Server, Access Manager fails with the message
(among many others)
netscape.ldap.LDAPException: SSL connection to
eauth1.arc.nasa.gov:636, SSL_ForceHandshake failed: (-8157) Certificate extension not found. (91); Cannot
connect to the LDAP server
I am able to connect to the Directory Server instanc with JXplorer using SSL (with a complaint about an unknown CA). Can someone explain the error message so that I can fix the problem or work around it?
Thanks

in the initial part of AMConfig.properties, you'll find an entry similar to trustSSLCerts . This, by default, is set to false. Trying setting it to true (AM web server instance will need a restart). This lets AM continue with SSL handshaking inspite of errors. Am not sure if this affects AM to DS connectivity as well. It sure affects AM to AM communication (in a multiple server configuration).
Naturally, it is not recommended that you use this feature when you are ready for production, but atleast it'll let you be sure that apart from the cert issue, everything else is okay.
Hope this helps.

CRL and Directory server

We are running Web Proxy server (Iplanet) with reverse proxy option on Solaris 8.This will give our staff access to applications inside.
Access is based on certificates.
Certificates are under own control using Windows 2000 certificate server.
We want to be able to use either the CRL or issued certificates with ACL on Proxy server.Therefore installed Directory server 5.1 (Solaris 8) to act as LDAP.
Any ideas how I can use the CRL info for this?
Downloading and installing CRL is possible and working.
Main question is : How can I use of the CRL info in combination with ACL on Proxy or Directory server ?
Thanks.

Anybody??? I really need help with this....

Java and Directory server

Similar Messages

Maybe you are looking for