Ldapmodify not working from remote host

I have an aci on my Groups for class_admin
(targetattr = "*")
(target = "ldap:///ou=Groups, o=domain,dc=dom,dc=example,dc=com")
(version 3.0;
acl "class_admin for dynamic parent/student email groups";
allow (all,import)
(userdn = "ldap:///uid=class_admin, ou=people, o=domain, dc=dom,dc=example,dc=com") and
(dns="remote-server.domain.com")
When I run this from the host that the DS is running on, it works fine, but when I run it from the remote host, "remote-server.domain.com" I get "ldap_add: Insufficient access (50)
additional info: Insufficient 'add' privilege to add the entry"
ldapmodify -h $host -D "uid=class_admin,ou=people,o=domain, dc=dom,dc=example,dc=com -w $password -a -f /tmp/gun.ldif
Edited by: knabe_t on Sep 21, 2007 10:20 PM

Hi,
it should work ...if remote-server.domain.com is located in same domain as DS host.
Stefan

Similar Messages

XML not working in remote host

Dear colleagues, I've a JSP successfully running locally with J2SE1.4.2 and Tomcat5.
The problem is it won't run when uploaded in the remote host. I've spent hours in vain, please help.
The program should load an XML file located in the application folder (same path as the JSP), parse it into
a DOM tree and retrieve some values.
I'm getting NullPointerException.
My import statements:
<%@ page import="java.io.*" %>
<%@ page import="org.w3c.dom.*" %>
<%@ page import="org.xml.sax.*" %>
<%@ page import="javax.xml.parsers.*" %>
The code I'm using to get the real path of xml file from JSP scriptlet is:
String filepath = application.getRealPath(filename);
However, I also tried and failed with the hard-coded pathname like this:
String filepath ="/var/tomcat/webapps/babyuniverse/myxmlfile.xml";
Upon checking the Java version of remote host, I found that it is 1.2.2
Now I guess, some of the packages I'm importing may not exist in the remote host, especially
the org.w3c.dom and/or org.xml.sax.
Upon checking the tomcat/lib folder in the remote host, I found it contains the following jar files:
ant.jar; commons-fileupload-1.0.jar; jasper.jar; jaxp.jar; parser.jar; servlet.jar; webserver.jar
Are those packages sufficient to handle my program. If not, which extra packages are needed and where
they can be found? I've permission to upload files to tomcat/lib and also to restart tomcat if needed.
But I cannot update classpath.
Thank you for the help.

Hi, I found out where to find those jars you mentioned.
But unfortunately, I was wrong in stating that I'm allowed to upload files to
tomcat/lib. When I tried, I couldn't. I could only upload them to
my app's WEB-INF/lib. And this isn't working. Any ideas to solve my problem?
I'm sure the line I'm getting the NullPointerException is at
Document mydoc = myparser.parse(new File(xml_file_name));
My assumption is that it is not able to find a parser.
Please help someone.

Web SAPconsole doesn't work from remote host

Hi,
we have a SAPconsole server (Win XP EN, SP2, last windows update). win a full SAPgui 6.40 comp 5 with SP23.
SAPconsole with a telnet server works fine in local and in remote hosts.
Web SAPconsole works fine in local but when I try from a remote host such a PC with IE6 with right url we stay in wait status forever... no error message ora other warning.
Have you have any idea ?

Hello Ganimede Dignan,
although I do not know if XP (which version?) is officially supported it should work, please remember that XP probably has a (crippled: max 10 connections) IIS5 on it and win2003 comes with a IIS6. Since you stated that it works locally it must be something with you IIS, network or firewall security settings.
Please upgrade your web/sapconsole to the latest patch for 640 since there are known concurrency issues for the patches < 25.
Regards,
Fekke

PIX 501 config - access to internal network not working from remote VPN users - everything on the inside is OK

One other thing - I had a problem with the key pairing so I rebuilt the rsa 1024 and the unit started working. Unfortunately I reloaded without the config in place and now I cannot get it to work again. Any help will be greatly apprecaited although I did review a dozen other posts of people having similar problems and for some reason there is never any conclusion as to the solution and I am not sure why.
Some other info from the client end:
I just ran the stats on the client and packets are being encrypted BUT none are decrypted.
Also Tunnel received 0 and sent 115119
Encryption is 168-bit 3-DES
Authentication is HMAC-SHA1
also even though the allow LAN is selected in the Cisco VPN client it states the local LAN is disabled in the client stats
also Transparent tunneling is selcted but in the stats it states it is inactive
I am connecting with the Cisco VPN Client Ver 5.0.07.0440
This config works. It is on the internal net 192.168..40.x and all users obtain dhcp and surf the web. It has required ports opened.The problem is that you can connect remotely via the VPN and you receive an IP address from the remote-vpn pool but you cannot see any machines on the internal network. The pix is at 40.2 and you cannot ping the pix and the pix from the remote PC connecting via the VPN and youcannot ping the remote PC from the PIX console when the remote is connected and receives the first IP address in the VPN pool of 192.168.40.25
I need to see the internal network and map network drives. I have another friend that is running the same config and it works but his computer is on a linksys wireless and has an IP of 192.168.1.x and the IP he receives from the VPN pool is 192.168.1.25 so I do not know if the same network is allowing this config to work even if there is an error in the config. In my present case I obtain the ip of 192.168.40.25 from the VPN pool and my connecting pc on 192.168.1.x I really am not sure how the VPN virtual adapter works. I am assuming it routes all traffic from your connecting PC to and from the virtual adapater but I really do not know for sure.
Other people have had similar issues with accessing the internal network from the VPN. One solution was the split-tunnel, another was the natting and another had to do with the encrption where there and an issue with the encrypt and ecrypt which was stopping the communicaton via the VPN.
I still cannot seem to find the issue with this config and any help will be greatly appreciated.
This is the config
interface ethernet0 100full
interface ethernet1 100full
nameif ethernet0 outside security0
nameif ethernet1 inside security100
enable password somepassword
hostname hostname
fixup protocol dns maximum-length 512
fixup protocol ftp 21
fixup protocol h323 h225 1720
fixup protocol h323 ras 1718-1719
fixup protocol http 80
fixup protocol rsh 514
fixup protocol rtsp 554
fixup protocol sip 5060
fixup protocol sip udp 5060
fixup protocol skinny 2000
fixup protocol smtp 25
fixup protocol sqlnet 1521
fixup protocol tftp 69
names
object-group network internal_trusted_net
network-object 192.168.40.0 255.255.255.0
object-group icmp-type icmp_outside
icmp-object echo-reply
icmp-object unreachable
icmp-object time-exceeded
icmp-object source-quench
access-list OutToIn permit icmp any xxx.xxx.xxx.0 255.255.255.248 object-group icmp_outside
access-list no_nat_inside permit ip 192.168.40.0 255.255.255.0 192.168.40.0 255.255.255.0
access-list split_tunnel permit ip 192.168.40.0 255.255.255.0 192.168.40.0 255.255.255.0
access-list OutToIn permit ip any any
access-list outbound permit ip any any
(NOTE: I had many more entries in the access list but removed them. Even with the above two allowing everything it does not work)
pager lines 24
mtu outside 1500
mtu inside 1500
ip address outside xxx.xxx.xxx.xxx 255.255.255.248
ip address inside 192.168.40.2 255.255.255.0
ip audit info action alarm
ip audit attack action alarm
ip local pool vpn_client_pool 192.168.40.25-192.168.40.30
pdm history enable
arp timeout 14400
global (outside) 1 interface
I had this statement missing from the previous posted config but even with the nat (inside) 0 access-list no_nat_inside it still does not work.
nat (inside) 0 access-list no_nat_inside
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
access-group acl_outside_in in interface outside
access-group outbound in interface inside
route outside 0.0.0.0 0.0.0.0 xxx.xxx.xxx.xxx 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00
timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout uauth 0:05:00 absolute
aaa-server TACACS+ protocol tacacs+
aaa-server RADIUS protocol radius
aaa-server LOCAL protocol local
http server enable
http 192.168.40.0 255.255.255.0 inside
no snmp-server location
no snmp-server contact
snmp-server community $XXXXXX$
no snmp-server enable traps
floodguard enable
sysopt connection permit-ipsec
crypto ipsec transform-set 3des_strong esp-3des esp-sha-hmac
crypto dynamic-map clientmap 50 set transform-set 3des_strong
crypto map vpn 50 ipsec-isakmp dynamic clientmap
crypto map vpn client configuration address initiate
crypto map vpn client configuration address respond
crypto map vpn client authentication LOCAL
crypto map vpn interface outside
isakmp enable outside
isakmp identity address
isakmp client configuration address-pool local vpn_client_pool outside
isakmp nat-traversal 20
isakmp policy 10 authentication pre-share
isakmp policy 10 encryption 3des
isakmp policy 10 hash sha
isakmp policy 10 group 2
isakmp policy 10 lifetime 86400
vpngroup remote-vpn split-tunnel split_tunnel
vpngroup remote-vpn idle-time 10800
vpngroup remote-vpn password ANOTHER PASSWORD
telnet timeout 5
ssh 0.0.0.0 0.0.0.0 outside
ssh 192.168.40.0 255.255.255.0 inside
ssh timeout 30
console timeout 60
dhcpd address 192.168.40.100-192.168.40.131 inside
dhcpd dns xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx
dhcpd lease 3600
dhcpd ping_timeout 750
dhcpd enable inside
username AUSER password PASSWORD privilege 15
terminal width 80
****************** End of config
I have been searching docs and other people's postings trying to obtain the info to make this work. It appears pretty much boiler plate but I believe my problem is in the natting. I am using a range in the internal network for the VPN pool and I have tried switching this to other networks but this has not helped. Unfortunately I have been unable to get the PDM to work and I believe this is a PC config thing and I did not want to waste the time on it. I read a post where a person using the PDM interface with the same problem (not being able to access the internal network) was able to go to a section in the VPN wizard and set the Address Exeption Translation. They said they originally set the VPN subnet when they did not have to. Many of the other blogs I read also stated that if the natting is not proper for the VPN pool- that it will not work but I am confused by the examples. They show as I do the complete range for an access-list called no_nat_inside but I believe it should only have the VPN pool IP range and not the entire network since the others do require natting - not sure if my thought process is correct here. Any help will be greatly apprecaited. Also this morning I just tried a boiler plate example from CISCO and it also did not do what I need for it to do. And I also connect a PC to obtain an IP to see if I can see it - no good. The PC can ping the PIX and viceversa but no one can ping the remote PC that connects via the CISCO Remote VPN client even though it receive an address from the vpnpool. Also include LAN is checked off on the client. This was mentioned in anther post.
Thank you once again.

Hi,
PIX501 is a very very old Cisco firewall that has not been sold for a long time to my understanding. It also doesnt support even close to new software levels.
If you wanted to replace the PIX501 the corresponding model nowadays would be ASA5505 which is the smallest Cisco ASA firewall with 8 switch port module. There is already a new ASA5500-X Series (while ASA5505 is of the original ASA 5500 Series) but they have not yet introduced a replacing model for this model nor have they stopped selling this unit. I have a couple of them at home. Though naturally they are more expensive than your usual consumer firewalls.
But if you wanted to replace your PIX firewall then I would probably suggest ASA5505. Naturally you could get some other models too but the cost naturally rises even more. I am not sure at what price these are sold as used.
I used some PIX501 firewalls at the start of my career but have not used them in ages since ASA5505 is pretty much the firewall model we use when we need a firewall/vpn device for a smaller network/branch site.
Here is a PDF of the original ASA5500 Series.
http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/prod_brochure0900aecd80285492.pdf
Here is a PDF of the new ASA5500-X Series
http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/at_a_glance_c45-701635.pdf
I am afraid that its very hard for me atleast to troubleshoot this especially since I have not seen any outputs yet. Also the very old CLI and lack of GUI (?) make it harder to see what the problem is.
Could you provide the requested outputs?
From the PIX after connection test
show crypto ipsec sa
Screen captures of the VPN Client routing and statistics sections.
- Jouni

Exchange 2010 Free busy not working from remote site to main site "exception message is: Could not find a base address"

Hi all , I have an exchange 2010 SP 2 environment with 2 sites , the remote site FL free busy has NEVER worked and I get this error on the remote site , is this related ?
thanks
Log Name: Application
Source: System.ServiceModel 3.0.0.0
Date: :
Event ID: 3
Task Category: WebHost
Level: Error
Keywords: Classic
User: SYSTEM
Computer: FL-CAS1.WOMBAT.LOCAL
free bust works from WITHIN the remote (FL ) site , but NEVER to the main (WASH) site , it has Never worked ,I am thing that this error is related
thanks I have no idea how to fix
Description:
WebHost failed to process a request.
Sender Information: System.ServiceModel.ServiceHostingEnvironment+HostingManager/17256489
Exception: System.ServiceModel.ServiceActivationException:
The service '/EWS/exchange.asmx' cannot be activated due to an exception during compilation. The exception message is: Could not find a base address that matches scheme http for the endpoint with binding CustomBinding. Registered base address schemes
are [https].. ---> System.InvalidOperationException:
Could not find a base address that matches scheme http for the endpoint with binding
++++

Hi
This issue could be with corruption in Autodiscover and web services virtual directory
Replace Web.config file for Autodiscover and web services virtual directory from the other working site
Delete and Recreate Autodiscover and web services virtual directory
Do this only on the affected site
Remember to mark as helpful if you find my contribution useful or as an answer if it does answer your question.That will encourage me - and others - to take time out to help you Check out my latest blog posts on http://exchangequery.com Thanks Sathish
(MVP)

SFTP receiver error: putFile: Could not connect to remote host; Reason: Unable to open Sftp client. SshReasonCode: CHANNEL_FAILURE

Hi,
When we try to send file over seeburger SFTP (receiver) we are getting the error as below.
Message processing failed. Cause: javax.resource.ResourceException: Fatal exception: javax.resource.ResourceException: >> Description: SFTP transaction error occured.>> Details: putFile: Could not connect to remote host; Reason: Unable to open Sftp client. SshReasonCode: CHANNEL_FAILURE>>SendingStatus: NOT_TRANSMITTED>>FaultCategory: COMMUNICATION_ERROR>>Retryable: true>>Fatal: true, >> Description: SFTP transaction error occured.>> Details: putFile: Could not connect to remote host; Reason: Unable to open Sftp client. SshReasonCode: CHANNEL_FAILURE>>SendingStatus: NOT_TRANSMITTED>>FaultCategory: COMMUNICATION_ERROR>>Retryable: true>>Fatal: true
But we are able to connect through filezilla . we are able to create and delete file using the same username and password which is being used in SFTP adapter.
we have imported the both dsa and rsa keys in SFTP partner folder in NWA. Even though we are getting same error.
Thanks,
Vinayak

Hi Ram,
we checked with network team and port 22 is open and they are able to ping to the target system.
we checked the seeburger logs and we see EOF received from remote site error:
Caused by: com.maverick.ssh.SshException: EOF received from remote side [Unknown cause]
#at com.maverick.ssh2.TransportProtocol.b(Unknown Source)
#at com.maverick.ssh2.TransportProtocol.i(Unknown Source)
#at com.maverick.ssh2.TransportProtocol.nextMessage(Unknown Source)
#at com.maverick.ssh.message.SshMessageRouter.d(Unknown Source)
#at com.maverick.ssh.message.SshMessageRouter.access$000(Unknown Source)
#at com.maverick.ssh.message.SshMessageRouter$_b.run(Unknown Source)
Thanks,
Vinayak.

Error FRM-91500 when compile from remote host

Dear all,
I have a problem when compiling forms from remote using 'frmcmp.sh'. It creates error :
"FRM-91500: Unable to start/complete the build."
and when I try to compile from remote host using 'frmcmp', it creates error:
"frmcmp: error while loading shared libraries: libjvm.so: cannot open shared object file: No such file or directory"
The problem is also occured when I use vnc, ssh, telnet. So I can't complie forms when I login from remote host.
But,
the problem doesn't occured if I compile forms by login FROM SERVER directly. There's no firewall between me and the server, network connection is good, and I already try some advice from this forum using:
export ORACLE_TERM=vt220
export DISPLAY=202.181.18.31
But It still doesn't work. I try export DISPLAY using my local Ip-address, using my gateway ip-address, but none of them works. Please help me solve this problem so I can compile from remote host
The server specification:
Pentium 4
RAM 1 GB
OS Enterprise Linux AS release 4 (October Update 4)
server IP adddress:x.x.x.x
with product:
Oracle DB 10g
Oracle Apllication Server 10gR2
My own IP address:192.168.13.34
server see me as : x.x.x.x
Regards,
firman

your DISPLAY isn't correct,
it should be something like
export DISPLAY=203.81.184.30:0.0
where 0.0 stands for your local display and the virtual screen on it ..
(or something like that ... )
in any case I first would check the X-Session using some standard X-application
like xterm or xclock
as long as they don't work, your compile will fail
hope that helps
Volker

Dashboard link is not working from BI Publisher

Dashboard link is not working from BI Publisher. Please let me know How to fix this problem.

Please somebody guide me.
Dashboard link is working fine from the Apps Server Machine. But the link is not working from other machines. Do I need to setup machine.domain:<port_number> any where.
Thanks,
Vara

My mail is not working from my ipod i looked it up it says it trouble shooting but its not giving me anything to fix it can someone help me?

My mail is not working from my iPod touch. I looked it up and it says it trouble shooting? But they are not giving me anything to fix it. I restored my iPod touch to see if that worked and it didnt. Can anyone help me?

Can you access the account from another device?
Without you telling use the email provider and type of account we can't really help you.

HP Pavilion dv6-6181TX. System Recovery is not working From HP Recovery Manager.

HP Pavilion dv6-6181TX
Product No. A3U49PA
Genuine Windows 7 Home Premium 64
(but i upgraded it to windows 7 ultimate)
System Recovery is not working From HP Recovery Manager. so i cant restore my laptop to its original factory condition. (Genuine Windows 7 Home Premium).
so when i restart my computer and press Esc and then choose F11 i get this message :
"Windows failed to start. A recent hardware or software change might be the
cause. To fix the problem:
1. Insert your Windows installation disc and restart your computer.
2. Choose your language settings, and then click "Next."
3. Click "Repair your computer."
If you do not have this disc, contact your system administrator or computer
manufacturer for assistance.
File: \Boot\BCD
Status: 0xc0000225
Info: An error occured while attempting to read the boot configuration data."
i saw this from the forum
http://h30434.www3.hp.com/t5/Notebook-Recovery/Hp-recovery-manager-problems/m-p/2395473/highlight/tr...
Had the C partition been split/shrunk to form a new partition previously?
Does disk management show the HDD as basic or dynamic? (Start>Right-click Computer>Manage>disk management on the left).
If it has been switched to dynamic (Windows does this automatically when more than 4 partitions are present on the disk), then the F11 recovery partition won't function until it is restored to basic, but I would like to confirm that is the scenario before providing those steps.
The Disk management shows that my HDD as Dynamic, what should i do then if this is the case and the possible solution to my problem?
please help me & Thank you for your time,
This question was solved.
View Solution.

If you have more than 4 partitions you will need to delete the extra partition/partitions, then convert the hdd back to Basic.
Older versions of Partiton Wizard Free work:
http://www.sevenforums.com/tutorials/26829-convert-dynamic-disk-basic-disk.html
******Clicking the Thumbs-Up button is a way to say -Thanks!.******
**Click Accept as Solution on a Reply that solves your issue to help others**

The file to download the app for Android is not working from my phone--it says that the file isn't there. However it does see the one for the Iphone (even though it can't use it). I'm very computer literate and am pretty sure the problem is on your end.

The file to download the app for Android is not working from my phone--it says that the file isn't there. However it does see the one for the Iphone (even though it can't use it). I've tried it multiple times and continue to get the same message: "NOT FOUND The requested item could not be found". I also tried through the Market application on the phone but ended-up with the same result.
I'm very computer literate and am pretty sure the problem is on your end. If this is the case then no one can download the app. I considered that perhaps because it's still in Beta that it was removed due to some other type of software issue. I would really like to use Firefox on my new Droid (2.0); when with this be available?

Firefox will not appear in the Market for most phones with incompatible hardware. You can check if your phone is supported here:
https://wiki.mozilla.org/Mobile/Platforms/Android
Even on some supported devices, a bug in the Market software prevents Firefox from showing up. This may be related to the fairly recent Android Market app update. If you go to Settings/Applications/Market and choose "Uninstall" you can uninstall the update, and then search for and install Firefox from the marketplace.
Or, if you have a supported phone, you can download the app directly by typing this address into your phone's browser: http://bit.ly/fxbeta3
(Note: To download the app directly for an AT&T phone, you will have to search for instructions on "sideloading" the APK file, since AT&T disables the option to install from non-Market sources.)

File- Print not working from SQL Developer 1.2.1 Build MAIN-32.13

File->Print not working from SQL Developer 1.2.1 Build MAIN-32.13.
I downloaded sqldeveloper-1.2.1.3213.ZIP and extract to a local directory. From the extracted directory I ran ..\sqldeveloper\sqldeveloper.exe from Windows XP sp2. The program itself seems to run just fine but File-Print doesn't do anything. In Help-About, Java Platform is reported as 1.5.0_06 and Oracle IDE is 1.2.1.3213. I'm not sure where to look for what is causing the problem.
Thanks

I hadn't tried CTRL-P before but I did today. On the first attempt, I saw a small jump in the memory usage for sqldeveloper.exe as reported in Windows Task Manager. Otherwise, there was no change. A second CTRL-P in the same session produced a further bump but subsequent attempts in the same session produced no further change in CPU or Memory Usage.
Using Task Manager to monitor this further, I tried File->Print again and saw that sqldeveloper would periodically climb to 1 or 2 percent CPU and consume a little more memory. After a minute or so, though, all activity stops again.
I do not get a print dialog box from SQLDeveloper using either CTRL-P or File->Print

In 5s, personal hot spot does not work from time to time. Not detected

In 5s, personal hot spot does not work from time to time. Iphone does not get detected on Wi-fi or bluetooth. Restarting or rebooting does not help.

Settings, general, reset and reset network settings. Clear out your network settings and set personal hotspot again.
also avoid special characters making a password. hashtags or open brackets for example doesn't work too good.

File sharing is not working from pc to imac os x 10.9.2

file sharing is not working from pc to imac os x 10.9.2

Hello there Karen,
It sounds like you are having to power cycle your modem to get internet back every single day. We can start by troubleshooting your Airport Express to help isolate the issue. I would first perform a Soft Reset, then test the issue again. If needed as a last resort I would then perform a Hard Reset:
Soft reset
Connect the device to power and wait for it to complete its start up process. To learn more about the start up process, please see All about Wi-Fi base station Status Lights (LED).
Press and hold the reset button with a pen, pencil, or straightened paperclip for 1 full second, then release it. The light (LED) will begin flashing amber, indicating that the device is in soft reset mode.
From the AirPort menu bar item, choose the network created by the device (the network name does not change).
Open AirPort Utility from Applications > Utilities.
Select the base station, then click Edit (The Edit window will indicate that the base station is in Soft Reset mode).
Move through the tabs to make changes to your passwords or other settings as needed, and click Update and Continue as required
Quit AirPort Utility.
Hard reset
Press and hold the reset button with a pen, pencil, or straightened paperclip until you see the status light (LED) start to flash amber rapidly, which should occur after about five seconds.
Release the button and the device will reset.
Wait about a minute for the base station to finish restarting, then open AirPort Utility from Applications > Utilities.
Select the base station from Other Wi-Fi Devices, then click Edit.
Select the Other Options button.
Select "Restore previous settings" and click Next until you get to the final window.
AirPort Utility will indicate that Setup is complete. Click Done.
Quit AirPort Utility.
Resetting an AirPort base station FAQ
http://support.apple.com/kb/ht3728
Thank you for using Apple Support Communities.
Cheers,
Sterling

Asm link not working from kolkata

hi
http://www.oracle.com/technology/tech/linux/asmlib/install.html
this link is not working from india / kolkata.
what to do?

javadev991 wrote:
Now working.
What?
Just cross check certain things
- The servlet you specified in Form Action is correct
- The Form Method must be POST not GET
- The query string param you are specifying in URL which is classifiedsearchtype, You are trying to get the same param in the servlet. It is case sensitive.

Ldapmodify not working from remote host

Similar Messages

Maybe you are looking for