LDAP is not working on new Web Server

Hi, I configured LDAP authentication and it was working fine. After this I installed a new web server. I copied the security certificate etc ( copied everything from other web server) onto new webserver. When I try to login into Infoview or CMC then I get error message "Security plugin error: Failed to set parameters on plugin" from the new web server. Its working fine from the old web servers.
Not sure what else I have to do now as I have done the same thing on old servers in the past.
We are on BOXI R2 SP3 with web server on IIS 6.0. We have three web servers and 3 processing servers ( with all services) in cluster env.
Thanks,

I am sorry I got confused with Pure Enterise authentication. I should have referred to my notes. I apologize for this. Web application server is involved in communicating to LDAP. Below is the process
1) User logs into the application
2) Web application server security plugin sends credential to LDAP directory
3) LDAP directory authenticate users.
4) Web application server's security plugin sends users credential to LDAP
5) CMS requests user and group info from LDAP
6) The LDAP returns this information to CMS Security plugin
7) CMS will grant access if users is member of mapped group
8) If access is granted then both CMS and WAS plugin create a session
9) The WAS sends an enterprise session token to user's browser
I was referring to login into Infoview using LDAP.
Thanks,

Similar Messages

Sslext NOt working Sun ONE Web Server 6.0?

Hi,
I have implemented the sslext tag for dynamic switching of http to https.
I am using ATG Dynamo Server ONLY in the Development Env. (using the default Web Server of ATG) for testing this and sslext tag works fine using the Plug-In of struts which is in sslext.jar.
but in producation the ATG Dynamo Server 6.0 is configured with Sun ONE Web Server 6.0, as forwarding request throught the Web Server to the App Server.
But here sslext stop working?? any guss why?
Sun ONE Server 6.0 is configured with ATG Dynamo Server 6.0 as Connection Module.
There are three ways a Connection Module can handle requests for files whose MIME type is text/html.
1)You can choose to have the files served by the Sun ONE Web Server,
2)by the Dynamo server,
3)or by the Sun ONE Web Server (but also send requests to Dynamo for logging).
we select the 3rd option.
any Guess why this is happening???
regards
DJ

Since removing the log settings from magnus.conf failed to fix the problem, the log settings are probably not the source of the problem.
Did anything else - e.g. ColdFusion configuration changes - occur at about the same time you changed the log settings?

JDBC persistence of session data not working on iPlanet Web Server, Enterprise Edition 6.0 SP2

I am using windows 2000.
iPlanet Web Server, Enterprise Edition 6.0 SP2
I tried to do jdbc persistence for sessiondata.
Somehow it didn't work.
I edited the JdbcStore code and added some system.outs in it.
From the logs I could note that
It is going into
JdbcStore.init(Properties config)//when the server starts up
JdbcStore.reap(long currentTime) //when the server is brought down
But it is not going into
JdbcStore.save(IWSHttpSession session)
JdbcStore.remove(IWSHttpSession session)
JdbcStore.load(IWSHttpSession session)
I did a "select count(*) from sessions" and it got me
no of rows=0.
The logs contained
[06/Mar/2002:11:25:09] info ( 552): IWSSessionManager: Maximum number of sessions is 1000
[06/Mar/2002:11:25:10] info ( 552): IWSSessionManager: Maximum number of sessions is 1000
[06/Mar/2002:11:25:14] info ( 552): JdbcStore: initialized with url=jdbc:odbc:LocalServer, driver=sun.jdbc.odbc.JdbcOdbcDriver
So I should think it was working.
The pages that are using HttpSession are working ok but should I not get some rows in my table "sessions" when I query?
This is the webapps.xml I used.
<?xml version="1.0" encoding="ISO-8859-1"?>

<!DOCTYPE vs PUBLIC "-//Sun Microsystems, Inc.; iPlanet//DTD Virtual Server Web Applications 6.0//EN" "http://developer.iplanet.com/webserver/dtds/iws-webapps_6_0.dtd">
<vs>


<session-manager
class='com.iplanet.server.http.session.IWSSessionManager' >
<init-param>
<param-name>maxSessions</param-name>
<param-value>1000</param-value>
</init-param>
<init-param>
<param-name>timeOut</param-name>
<param-value>1800</param-value>
</init-param>
<init-param>
<param-name>session-failover-enabled</param-name>
<param-value>true</param-value>
</init-param>
<init-param>
<param-name>reapInterval</param-name>
<param-value>600</param-value>
</init-param>
<init-param>
<param-name>session-data-store</param-name>
<param-value>com.iplanet.server.http.session.JdbcStore</param-value>
</init-param>
<init-param>
<param-name>url</param-name>
<param-value>jdbc:odbc:LocalServer</param-value>
</init-param>
<init-param>
<param-name>provider</param-name>
<param-value>sun.jdbc.odbc.JdbcOdbcDriver</param-value>
</init-param>
<init-param>
<param-name>username</param-name>
<param-value>sa</param-value>
</init-param>
<init-param>
<param-name>password</param-name>
<param-value>sa</param-value>
</init-param>
<init-param>
<param-name>lookupPool</param-name>
<param-value>4</param-value>
</init-param>
<init-param>
<param-name>insertPool</param-name>
<param-value>4</param-value>
</init-param>
<init-param>
<param-name>updatePool</param-name>
<param-value>4</param-value>
</init-param>
<init-param>
<param-name>deletePool</param-name>
<param-value>4</param-value>
</init-param>

</session-manager>
<session-tracking use-cookies="true" />


<web-app uri="/Web" dir="E:/iPlanet/Servers/docs" enable="true" >




</web-app>
</vs>

I'm trying to do the same thing with a file store, also somewhat unsuccessfully. However, one thing I can point out is that the manual says that the <session-manager> element should be within the <web-app> element in web-apps.xml. In your example, it is outside of it.

Wireless with PEAP Authentication not working using new NPS server

All,
We are planning to migrate from our old IAS server to new NPS server. We are testing the new NPS server with our wireless infrastructure using WISM. We are using PEAP with server Cert for authentication. For testing purpose we are doing user authentication but our goal is to do machine authentication. On client side we are using Windows XP, Windows 7 & iPAD’s
I believe I have configured the NPS & CA server as per the documents I found on Cisco support forum & Microsoft’s site.
But it is not working for me. I am getting the following error message on the NPS server.
Error # 1
=======
Cryptographic operation.
Subject:
            Security ID:                 SYSTEM
            Account Name:                       MADXXX
            Account Domain:                    AD
            Logon ID:                    0x3e7
Cryptographic Parameters:
            Provider Name:          Microsoft Software Key Storage Provider
            Algorithm Name:         RSA
            Key Name:      XXX-Wireless-NPS
            Key Type:       Machine key.
Cryptographic Operation:
            Operation:       Decrypt.
            Return Code: 0x80090010
Error # 2
======
An error occurred during the Network Policy Server use of the Extensible Authentication Protocol (EAP). Check EAP log files for EAP errors.
I was wondering if anyone has any insight on what is going on.
Thanks, Ds

Scott,
I have disabled MS-CHAP v1 & only MS-CHAP v2 is enabled on Network Policies > Constraints.
I disabled validate Certificate on Windows 7 and tried to authenticate, it is still failing. Here is the output from the event viewer:
Cryptographic operation.
Subject:
Security ID: SYSTEM
Account Name: MADHFSVNPSPI01$
Account Domain: AD
Logon ID: 0x3e7
Cryptographic Parameters:
Provider Name: Microsoft Software Key Storage Provider
Algorithm Name: RSA
Key Name: DOT-Wireless-NPS
Key Type: Machine key.
Cryptographic Operation:
Operation: Decrypt.
Return Code: 0x80090010
Network Policy Server denied access to a user.
Contact the Network Policy Server administrator for more information.
User:
Security ID: AD\mscdzs
Account Name: AD\mscdzs
Account Domain: AD
Fully Qualified Account Name: AD\mscdzs
Client Machine:
Security ID: NULL SID
Account Name: -
Fully Qualified Account Name: -
OS-Version: -
Called Station Identifier: 64-ae-0c-00-de-f0:DOT
Calling Station Identifier: a0-88-b4-e2-79-cc
NAS:
NAS IPv4 Address: 130.47.128.7
NAS IPv6 Address: -
NAS Identifier: WISM2B
NAS Port-Type: Wireless - IEEE 802.11
NAS Port: 29
RADIUS Client:
Client Friendly Name: WISM2B
Client IP Address: 130.47.128.7
Authentication Details:
Connection Request Policy Name: Secure Wireless Connections
Network Policy Name: Secure Wireless Connections
Authentication Provider: Windows
Authentication Server: MADHFSVNPSPI01.AD.DOT.STATE.WI.US
Authentication Type: PEAP
EAP Type: -
Account Session Identifier: -
Logging Results: Accounting information was written to the local log file.
Reason Code: 23
Reason: An error occurred during the Network Policy Server use of the Extensible Authentication Protocol (EAP). Check EAP log files for EAP errors.
Attached are EAP logs & debug logs from the controller.
Thanks for all the help. I really appreciate.

Embedded font errors after migrating pdfs to new web server

Hi All,
After hundreds of working pdfs were moved to new web server, they produce variations of the "cannot extract the embedded font" (name of font) "some characters may not display or print correctly" error. The first page loads perfectly and the rest never load. All these files open fine when I open local copies in Reader (9.1.3) and Professional (7.1.0).They also open fine when moved to another server. When I delete copies on the server and re-upload using the working copies, the errors persist. Doesn't make sense. I also occasionally get the error "there were problems reading this document (14)".
I was told by the IT department that a possible cause was that the new server environment used fonts installed on the server rather than the local machine to display pdfs. This doesn't make sense to me. I've researched these errors and haven't found anything applicable or that has worked. Any suggestions? Has anyone else expeienced this?
The server is IIS and is running ASP.net. The IT dudes are saying they need to install all the refferenced fonts on the web server but due to the expense of this, they can't.This will nessecitate a really bizzarre and Rube Goldbergesque workaround (that I'm not even going to try to explain here) that I'd really like to avoid. Any suggestions? Are there any Acrobat settings that need to be twekaed?

Hi,
I read the following on another discussion in this forum:
it appears that with the shortkey ctrl+shift+Y you can force the pc to work around the system fonts
Maybe that helps.
Jenny

Free busy information not working in new exchange site.

HI,
We have central site Exchange 2010 setup and it working fine . For business requirement we Installed new Exchange server(Mail/CAS/HUB) in new site.
Post installed, Auto discover and mail flow are working fine but Free/busy information is not working for new site mailbox users(Not working in outlook and OWA also).
I am having a strange error coming from outlook. When I run "Test E-mail AutoConfiguration" in Outlook, it comes up with Protocol: Exchange Http "wrong server name"
Please share your suggestion to change/configure "correct server name" in "Protocol: Exchange HTTP"
Protocol: Exchange HTTP
Server: wrong server name
Login name: testuser
SSL: Yes
Mutual Authentication: Yes
Note : ( Protocol: Exchange RPC show correct server information and other Urls (OOF, OAB, OWA, Availability server).)

Hi will martin,
Thanks for your reply..
Yes , I already pointed internal web service virtual directory ( "https://casarrayname/EWS/Exchan...) to CAS server in new site. Other internal URLs (OWA,ECP,OOF,Availability service) also pointed to
new site CAS server.
But , when i check Auto discover internal URI and URL. below is the result.
Result 1
[PS] C:\Windows\system32>Get-AutodiscoverVirtualDirectory -Server Servername
Name
Server InternalUrl
Autodiscover (Default Web Site)
Servername
Result 2
[PS] C:\Windows\system32>Get-ClientAccessServer -Identity servername |fl *internaluri*
AutoDiscoverServiceInternalUri : https://casarrayname/Autodiscover/Autodiscover.xml
When i tried to set interurl using the below command and it completed with no error but still InterURL not reflect.
command : Set-AutodiscoverVirtualDirectory -InternalURL https://casarrayname/Autodiscover/Autodiscover.xml

When i finally connected my mac to work network on windows environment everything related to apple including App store, Safari, software updates, iCloud and iTunes do not work using a proxy server and everything else is working very well

when i finally connected my mac to work network on windows environment everything related to apple including App store, Safari, software updates, iCloud and iTunes do not work using a proxy server and everything else is working very well including chrome browser…i tried everything but no clue...anybody have solution for this..???

I also forgot to note that this problem also persists with the new iBooks application. I cannot get past the 'Get Started' screen or access the iBooks Store. Again, all top bar menus are unresponsive.
DT

Can user roles by transferred to new web server?

Our ISP moved our files to a new web server since we were
running out of room on their old server. However, our user roles
did not get transferred. The settings for Administrator, Publisher
and Writer were moved, but our custom roles were not. Is there a
way for these roles to be transferred from the old server?
Thanks,
Kathy

Thanks for your response.
We aren't using CPS, but it looks like our ISP moved the
files from the _mm directory. But the cthub....csi file on the new
server is much smaller than it was on the old server (11 K vs 53
K). It looks like the default roles (Administrator, Publisher,
Writer) were moved somehow because the user names associated with
those roles are displayed. But none of our other roles are showing
up.
One other bit of information ... the name of our web
server/URL has changed with this move. I don't know if that would
make a difference.
Kathy

Flash Player Does not work at few Web Sites

I was using Flash Player 10 somehow it suddenly forced me to install the latest Flash Player and I did it. Now it does not work at few web sites but works on other. The web sites where it does not work I am including the screenshots. when I want to watch video on these sites it says loading ad and it keeps on like never ending please advise below are the screenshots of the two web sites where it does not work
Satbahadur
My Device is HP Laptop and I have Windows xp

Hi Chris
I checked on my daughters MAC laptop too its not working on it too. I may
try getting adblocker then I will try again. Thanks for your quick
attention I appreciate your help
Satbahadur
Message was edited by: Satbahadur Chris Sorry to add some more info I tried one adblocker called simple blocker but now the video does not load I am confused don't know what is possible Please advise when ever you have time Thanks again

Flash player does not work with new ICS Android 4.0.4 OS. Has this problem been addressed?

Flash player does not work with new ICS Android 4.0.4 OS. Has this problem been addressed? I am using Firefox Beta for android and I also tried just Firefox.

Please check the Play Store app for any Flash updates and install them if present.

Home sharing does not work with new mountain lion update.

home sharing does not work with new mountain lion update. Does anyone else have the same issue. Updated all computers in my home, deauthorized and reauthorized each computer. turn off home sharing and turned it back on. don't know what else to do..please help...

Our Apple TVs continue to lose connection ever since installing Mountain Lion on the host computer. The only thing that fixes them is to quit and relaunch iTunes, which only works unti the ATV goes to sleep. If a movie is paused for more than a few minutes and the ATV goes to sleep, pressing play again on the remote is greeted with "There are no movies on this computer" or "Turn on Home Sharing."
If we stop a video on one ATV and attempt to resume it in another room, the error begins again. The other ATV can't connect until iTunes is relaunched.
My guess is that it has something to do with the new [annoying] security settings. But I still haven't found a fix other than restarting iTunes everytime we want to watch something from our downloads. Fail.

HT3917 My apple wireless keyboard is not working after new batteries installed

My apple wireless keyboard is not working after new batteries installed.

Do you get a steady green light to say there is a connection. If not, are the batteries the right way round. Do you have a monitor to tell the batteries strength. Is there a reading. Are the batteries good quality ones, Duracell, Energiser or Apple rechargeables.

My new Dell PC running Windows 8 does not recognize my iPad or iPhone. Worked OK for iPhone for months but would not work for new iPad. I removed /relaoded iTunes and now it won't recognize either iPad or iPhone.

My new Dell PC running Windows 8 does not recognize my iPad or iPhone. Worked OK for iPhone for months but would not work for new iPad. I removed /relaoded iTunes and now it won't recognize either iPad or iPhone. Got any suggestions?

Hi there Lizabethfromaz,
You may find the troubleshooting steps in the article below helpful.
iOS: Device not recognized in iTunes for Windows
http://support.apple.com/kb/ts1538
-Griff W.

LR 5 not working on new Macbook Pro.

LR 5 not working on new Macbook Pro. Have tried 2 CC downloads, 5.6 licensed download and 5.5 licensed download, all result in the same thing. It comes up with basic screen but no panels and gives an error occurred when changing modules. Nothing I've tried seems to help. It also has says "get started with lightroom mobile at top left although it says it is Lr 5.6. Anybody else having problems? Calls to adobe result in no help and have to wait till Monday for some technical support. Surely this should run on a NEW laptop with no other software installed!!!

Install logs were fine. Application installed but wouldn't run properly. Finally got Adobe support and it turns out to be a file permissions error. Had to add both applications and myself as accessors of Lightroom folder under path ~/Library/Adobe/ and set permissions to read & write (was read only for everything but system) and apply to all enclosed folders. Runs fine now. Including this here in case anyone else runs across this issue.

YOUTUBE NOT WORKING ON NEW MACBOOK PRO

YOUTUBE NOT WORKING ON NEW MACBOOK PRO
Every time I want to see videos from youtube the video player just says "your browser does not currently recognize any of the video formats available".
Please help I have everything possible up to date.
Thanks!

It appears as if only some videos on YouTube will play using HTML5 and without Flash. For example, this video plays just fine for me and I do not have flash installed: http://www.youtube.com/watch?v=fxEWddT44BY
So, unfortunately, you will have to install flash or wait for YouTube to fix their website.
Also, one thing to try: When I had Flash installed and the "ClickToPlugin" Safari extension installed, YouTube would load all the movies in a simple HTML5 format. So no annotations or any other annoying stuff. Might be worth trying. You will have to install flash but, with the "ClickToPlugin" extension, you don't have to use Flash.

LDAP is not working on new Web Server

Similar Messages

Maybe you are looking for