Netscape 7 error -5933

Netscape 4.7 and IE 5 connect fine to https sites, but NS 7 returns
Error establishing an encrypted connection ... Error code -5933
I suspect (but am uncertain) that this might be a Bordermanager issue.
Any ideas anyone?

NS 7.0?
You might try disabling TLS in the Netscape settings. Also, try the
latest version, if a newer one is available. (I'd try Mozilla - it
works well for me).
Craig Johnson
Novell Support Connection SysOp
*** For a current patch list, tips, handy files and books on
BorderManager, go to http://nscsysop.hypermart.net ***

Similar Messages

  • Netscape Error: Connection reset by peer

              I am running a JSP application on weblogic and when I view in Netscape 4.08 on
              W2K I am getting an error saying Netscape Error:Connection reset by peer. Anyone
              else see same error. Any fixes?
              

    do u see this on the 5.1 line ?
              Netscape needs a content-length for every response that comes in, and in case the
              response is larger than the buffer size, the content-length isnt set and netscape
              keeps hovering even after getting all the data.
              When it sees that the connection has been closed from the other side, it thinks that
              the connection has been reset. (even after the server sends it a Connection: Close
              header)
              solns can be summed up as:
              1. call response.setContentLength whereever possible
              2. increase the buffersize of jsps (there might be an upperlimit though)
              3. move to another version of netscape (atleast > 4.7 ) on win2k
              let me know how the workarounds are
              thanks
              Nagesh
              Mettu Kumar wrote:
              > which version of wls are u using and what sp's?
              >
              > Kumar.
              >
              > Kyle Donovan wrote:
              >
              > > I am running a JSP application on weblogic and when I view in Netscape 4.08 on
              > > W2K I am getting an error saying Netscape Error:Connection reset by peer. Anyone
              > > else see same error. Any fixes?
              

  • Netscape Error

    I am running a Java Applet from a jar file. It runs fine from my server, but when put on my clients server I am getting the following error:
    java.lang.NullPointerException
    at java.lang.StringBuffer.append(Compiled Code)
    * at netscape.applet.DerivedAppletFrame$LoadAppletEvent.dispatch(Compiled Code)
    at java.awt.EventDispatchThread$EventPump.dispatchEvents(Compiled Code)
    at java.awt.EventDispatchThread.run(Compiled Code)
    at netscape.applet.DerivedAppletFrame$AppletEventDispatchThread.run(Compiled Code)
    This error ONLY happens in Netscape and only when loaded from my clients server. Internet Explorer runs fine.
    Also, I never use "StringBuffer.append" anywhere in the applets code.
    Any idea's?
    Thanks!

    We have the same problem and we're still trying to find out why.... i read somewhere it has sth to do with the Netscape Java supported version or sth like that, but i still don't understand....

  • How to open XML file in Netscape

    How to open XML file in Netscape.....
    XML file is opening correctly in IE, but giving error in Netscape.Error is
    Error loading stylesheet: Parsing and XSLT stylesheet failed....
    Reply me soon..............

    You may check these tips:
    How to Access Local File Systems from J2ME devices using FileConnection API
    http://www.java-tips.org/content/view/109/73/
    Opening and reading a file on the mobile device
    http://www.java-tips.org/content/view/352/73/

  • NSAPI (libproxy.so) Error message on Solaris 8

    I'm getting strange message when Netscape Client starts on Solaris 8:
    cbfe-dev-web01:/opt/weblogic:263> /opt/netscape/netscape
    ERROR: ld.so.1: /opt/netscape/netscape: fatal: relocation error: file /opt/netscape/plugins/libproxy.so:
    symbol __nsapi30_table: referenced symbol not found
    Cant load plugin /opt/netscape/plugins/libproxy.so. Ignored.
    Can you give me idea what happened to NSAPI ? It worked before.
    I rebooted the Solaris server - it did not help.
    Just a reminder : libproxy.so was copied from
    Weblogic 6.0 SP2 ../lib/solaris directory into /opt/netscape/plugins.

    What's version of NES/Iplanet you are running?
    thanks
    Jong
    "Ed Itkin" <[email protected]> wrote:
    >
    I'm getting strange message when Netscape Client starts on Solaris 8:
    cbfe-dev-web01:/opt/weblogic:263> /opt/netscape/netscape
    ERROR: ld.so.1: /opt/netscape/netscape: fatal: relocation error: file
    /opt/netscape/plugins/libproxy.so:
    symbol __nsapi30_table: referenced symbol not found
    Cant load plugin /opt/netscape/plugins/libproxy.so. Ignored.
    Can you give me idea what happened to NSAPI ? It worked before.
    I rebooted the Solaris server - it did not help.
    Just a reminder : libproxy.so was copied from
    Weblogic 6.0 SP2 ../lib/solaris directory into /opt/netscape/plugins.

  • Netscape SSL Proxy to Weblogic 6.0 SSL port doesn't work.

    Has anyone tried Netscape iPlanet Proxying to Weblogic 6.0 port 7002 using SSL? I'm getting an error reponse when I look at the Netscape error log file. The message: "[12/Apr/2001:15:37:15] failure (29375): for host 191.162.18.16 trying to GET /Login.jsp, wl-proxy reports: Error reading WebLogic Response from 191.162.18.16:7002 at line 764 of proxy.cpp, errMsg='File not found'", but if I use port 7001, it works fine.This is my obj.conf:Service fn="wl-proxy" WebLogicHost="191.162.18.16" WebLogicPort="7002" SecureProxy="ON" TrustedCAFile="/opt/bea_weblogic/wlserver6.0/config/myserver/democert.pem" RequireSSLHostMatch="FALSE"

    The server was stopped at 5:52 pm cst....
    Dec 30, 2008 5:52:40 PM org.apache.coyote.http11.Http11Protocol destroy
    INFO: Stopping Coyote HTTP/1.1 on http-12080
    This is the log at start-up at 8:30 pm cst...
    Dec 30, 2008 8:26:06 PM org.apache.catalina.core.AprLifecycleListener init
    INFO: The APR based Apache Tomcat Native library which allows optimal performance in production environments was not found on the java.library.path: C:\Program Files\Apache Software Foundation\Tomcat 6.0\bin;.;C:\WINDOWS\Sun\Java\bin;C:\WINDOWS\system32;C:\WINDOWS;C:\j2sdk1.4.2_13
    Dec 30, 2008 8:26:06 PM org.apache.coyote.http11.Http11Protocol init
    INFO: Initializing Coyote HTTP/1.1 on http-12080
    Dec 30, 2008 8:26:06 PM org.apache.catalina.startup.Catalina load
    INFO: Initialization processed in 1098 ms
    Dec 30, 2008 8:26:06 PM org.apache.catalina.core.StandardService start
    INFO: Starting service Catalina
    Dec 30, 2008 8:26:06 PM org.apache.catalina.core.StandardEngine start
    INFO: Starting Servlet Engine: Apache Tomcat/6.0.18
    Dec 30, 2008 8:26:11 PM org.apache.catalina.core.StandardContext start
    SEVERE: Error listenerStart
    Dec 30, 2008 8:26:11 PM org.apache.catalina.core.StandardContext start
    SEVERE: Context [GADXML] startup failed due to previous errors
    Dec 30, 2008 8:26:13 PM org.apache.coyote.http11.Http11Protocol start
    INFO: Starting Coyote HTTP/1.1 on http-12080
    Dec 30, 2008 8:26:13 PM org.apache.jk.common.ChannelSocket init
    INFO: JK: ajp13 listening on /0.0.0.0:8009
    Dec 30, 2008 8:26:13 PM org.apache.jk.server.JkMain start
    INFO: Jk running ID=0 time=0/187 config=null
    Dec 30, 2008 8:26:13 PM org.apache.catalina.startup.Catalina start
    INFO: Server startup in 7488 ms

  • Applet: Null Pointer Exception in NN but not in IE???!!!!

    hi all,
    i have worked on a an applet that uses a nother Runnable class to implement an animated progress bar using MediaTracker, and i can control when to start animation and when to stop it! it worked great on IE. But when i came to test it on Netscape Navigator, it surprised me with THIS
    and now i don't know what to do
    # Applet exception: java.lang.NullPointerException
    java.lang.NullPointerException
    at sun.awt.windows.WGraphics.drawImage(Compiled Code)
    * at AnimationPanel.flip(Compiled Code)
    at AnimationPanel.run(Compiled Code)
    at java.lang.Thread.run(Compiled Code)
    java.io.IOException: CreateProcess: vcafe -netscape error=2
    at java.lang.Win32Process.<init>(Compiled Code)
    at java.lang.Runtime.exec(Compiled Code)
    * at java.lang.Runtime.exec(Compiled Code)
    at netscape.debug.Debugger.launchDebugger(Compiled Code)
    at netscape.debug.Debugger.uncaughtException(Compiled Code)
    at netscape.applet.AppletThreadGroup.uncaughtException(Compiled Code

    well, thanks everybody, seems i wasn't the only one troubled with this:
    for ppl who might read my Q next time,
    always run u'r applet from a web server! :)
    netscape has it's own way! in everything ...

  • IWS 6.0 SP1, document contained no data

    Hello all,
    I'm working on iWS6.0 SP1 on Solaris 8 and when I start the administration
    console (Netscape Communicator, port 7777) I see this Netscape error: "the
    document contained no data. Try again later or contact the server
    administrator", and the adminitratotion server restarts. Log errors shows
    this output:
    [13/Dec/2001:09:11:05] warning ( 680): for host 194.158.64.17 trying to GET
    /https-admserv/icons/dgLeftTab.gif, send-file reports: error sending
    /usr/iplanet/ws6.0/bin/https/admin/icons/dgLeftTab.gif (Operation not
    applicable) status=1:5
    [13/Dec/2001:09:11:05] warning ( 680): for host 194.158.64.17 trying to GET
    /https-admserv/icons/spacer.gif, send-file reports: error sending
    /usr/iplanet/ws6.0/bin/https/admin/icons/spacer.gif (Operation not
    applicable) status=1:5
    [13/Dec/2001:09:11:10] failure ( 655): Child process admin thread is
    shutting down
    [13/Dec/2001:09:11:10] info ( 684): Installing a new configuration
    [13/Dec/2001:09:11:10] info ( 684): [LS ls1] http://www.govern.ad, port 7777
    ready to accept requests
    Thanks in advance

    Greg Redman wrote:
    I upgraded from iWS 4.1 SP7 to 6.0 back in August. After some
    migration problems with config files were resolved, everything was up
    and running. No changes were made to the ACL or server.xml files to
    get everything running. Because of the migration problems, however,
    we went back to iWS 4.1 and waited for the SP1 release.
    I just went through the SP1 migration and everything is up and running
    except the none of my images are showing up on the HTML pages being
    served. For every "GET" of an image file I'm seeing an error in the
    error log the says ...(no access rights). Has something changed in
    SP1 that requires ACL type changes ?Can you show us an example of the error? What about the request/response
    (what's being sent back to the browser)?
    Joe McCabe Some men are alive today simply because it is against the
    Moz' Pit law to kill them. -- Ed Howe

  • CPU message on Solaris 8 install on Sparc U30

    When installing Solaris 8 on Ultra Sparc 30, I get the following message after "Configuring /dev and /devices"
    panic[cpu0]/ thread=2a1001dd40: BAD TRAP: type31 rp 2a1001cf30 addr=2f150fcb998 mmu_fsr=0
    followed by;
    sched: trap type=0x31
    followed by what appears to be a memory dump
    followed by Watchdog Reset and Externally Initiated Reset
    Is this a media problem or hardware falilure?

    What's version of NES/Iplanet you are running?
    thanks
    Jong
    "Ed Itkin" <[email protected]> wrote:
    >
    I'm getting strange message when Netscape Client starts on Solaris 8:
    cbfe-dev-web01:/opt/weblogic:263> /opt/netscape/netscape
    ERROR: ld.so.1: /opt/netscape/netscape: fatal: relocation error: file
    /opt/netscape/plugins/libproxy.so:
    symbol __nsapi30_table: referenced symbol not found
    Cant load plugin /opt/netscape/plugins/libproxy.so. Ignored.
    Can you give me idea what happened to NSAPI ? It worked before.
    I rebooted the Solaris server - it did not help.
    Just a reminder : libproxy.so was copied from
    Weblogic 6.0 SP2 ../lib/solaris directory into /opt/netscape/plugins.

  • Can not download with any browser

    I recently updated my OS 10.4.7 to 10.4.11, not that that is the problem. But a couple of days ago I noticed I couldn't download software and I also can not open pdfs as I usually do. I have three browsers. The now defunct Netscape 7.1, I use for my mail til I can get SeaMonkey. Firefox 1.0.7 and Safari 3.0.4. I tried to download SeaMonkey (23mg). Netscape: error message saying "System/library/filesystems etc. ..could not be saved because the source file could not be read. Try again later or contact the server administrator. (I have no server and later never cured it).
    Firefox: Its download strip runs quickly,like a split second and there's nothing downloaded.
    Safari: It shows in the download window, when I click the curled arrow icon it runs a split second and then says "8.1 kb of 23 mgs; can not create file". Download manager confirms these attempts failed.
    I am also experiencing pdfs sent to me will not open.I found a workaround but the issue now exists.
    Oddly, I still have a G3 with 10.2.8 and my original Netscape 7.1 still on it. Last night I reconnected to that computer and using Netscape there I was able to downloaded SeaMonkey with no problem whatsoever.
    Its not my browsers. I have run repairs on my permissions using disk utility. Do I need to reinstall 10.4? Do I need to throw away some plists?
    Thanks for any help, if this doesn't work, I'll go back to 10.4.7 and stay there.
    Lymeris

    Hi Both Helpful folks,
    Here's the latest. Ben, working in an account that's clean is what I'll use. I moved my Netscape and Firefox to this account and downloaded SeaMonkey no problem. Then chose my profile (incase there was a problem there), again downloaded with no problem.
    Conclusion: its not the browsers. Something is keeping them from downloading on my other account.
    Plan is to take app;ications and move them over as if starting from the beginning. It will be tedious because I will take only one at a time. I'll start with the Adobe Reader 7 since they had problems following my preferences and would not open pdfs in Adobe. Maybe its corrupted, etc, etc.
    Ques:
    I wonder if either of you or anyone else has an suggestions on what I can test first that may cause this issue to save some time, likely culprits. If not, I'll keep doing this.
    Remember Norton Utilities and Disk Doctor? What software is out there that I can use like that that can find and clean corrupted files on Tiger?
    Thanks
    Lymeris

  • ConnectRetrySecs vs ConnectTimeoutSecs vs HungRecoverSecs

    Below is a description from one of our developers as to what he
              believes these values mean. Can anyone here clarify what each of these
              values will do and when is a good time to adjust them from the
              defaults? We seem to get bitten by failing weblogic servers and would
              like to be able to failover if one is "hung" a lot sooner than we are.
              We are using NES (Iplanet) 4.1 and WebLogic 4.5.1 SP13..
              It would seem that ConnectTimeoutSecs and ConnectRetrySecs actually
              are internal Weblogic timing things that are in general unrelated to
              our application, but which provide us with the ability to gauge how
              long we should wait before retrying if we can't get any handshake at
              all from the cluster. That is, a request comes in from outside, it
              gets touched by the Weblogic proxy, which then attempts to route the
              request back to the app server cluster. The proxy must then attempt
              to open a socket with the cluster so that someone will respond to the
              request. This first connection to the app server layer requires a
              first "handshake" with the NES proxy, and these paramters gauge how
              long the proxy should wait before it gets that first handshake before
              retrying. It should try to get any app server to respond within
              ConnectRetrySecs, retrying every ConnectRetrySecs until it hits
              ConnectTimeoutSecs, at which time it will stop asking the cluster for
              a connection and return an error status 503 to the end-user (i.e. that
              ugly NSAPI failure page).
              In short, I believe that only one request to get work done will ever
              be sent back to the app server layer even upon retry. Which is good,
              'cause otherwise it'd go into some crazy spin-lock condition.
              This is different from what we thought it should do in the past. We
              incorrectly believed that these parameters should be set for the time
              it takes to get the response for the ENTIRE jsp request (i.e. we made
              a connection to the app server, requested that it should do work, and
              this was how long it was going to wait before retrying the work
              request). It turns out that the HungServerRecoverSecs parameter is
              more for that. Thats the length of time that the proxy will wait
              after a work request before declaring that a particular app server has
              fallen out of the cluster, and therefore should no longer be used to
              do any work. Since this time IS dependant on how long it takes us to
              perform any work request (i.e. whats the longest time it takes any JSP
              to render under our highest load), this number should be set VERY
              high. 300 is probably a little high, but workable for us, so thats
              probably ok. However, 300 seconds is 5 minutes. If a server hasn't
              responded to a work request in that long, we probably have bigger
              problems.
              IF the above are correct, then setting ConnectRetrySecs to 2 MAY give
              us some marginally better load-balancing in the cluster, but I doubt
              that we'll see any appreciable difference under our current load
              anyways.
              We also see "failure" Netscape error messages when the cluster is
              under heavy load which result in "Connect Reset by Peer" and "Resource
              Temorarily Available" each of these referring to an error in
              proxy.cpp...
              Thanks..
              Ruth
              

              Partly yes, partly no.
              You DO NOT want load-balancing by setting these parameters to be small. No, no,
              no. This will make your httpSessions flip around from one server to the other
              when things get slow - making things even slower.
              The analysis of ConnectRetrySecs, ConnectTimeoutSecs is correct - except - if
              the connect times out against one server in the cluster, WLS will try to connect
              to another server in the cluster. You should probably not touch these. If these
              connections keep failing, wlproxy keeps retrying.
              Given that a connection to WL has been made, the remainder of the transaction
              is governed by HungRecoverSeconds. If a request takes longer than this it fails.
              It is NOT retried unless the request is IDEMPOTENT (i.e. you don't want multiple
              charges on a credit card because the server was slow). 300 seconds is fine unless
              you are using SAP.
              If you set the wlproxy property DEBUG=ON, you will get reams of debug information
              in /tmp/wlproxy.log.
              Your best bet is to fix whatever is making WL slow - there is no such thing as
              graceful failover.
              Mike
              [email protected] (Ruth) wrote:
              >Below is a description from one of our developers as to what he
              >believes these values mean. Can anyone here clarify what each of these
              >values will do and when is a good time to adjust them from the
              >defaults? We seem to get bitten by failing weblogic servers and would
              >like to be able to failover if one is "hung" a lot sooner than we are.
              >We are using NES (Iplanet) 4.1 and WebLogic 4.5.1 SP13..
              >
              >---------------------------------------
              >It would seem that ConnectTimeoutSecs and ConnectRetrySecs actually
              >are internal Weblogic timing things that are in general unrelated to
              >our application, but which provide us with the ability to gauge how
              >long we should wait before retrying if we can't get any handshake at
              >all from the cluster. That is, a request comes in from outside, it
              >gets touched by the Weblogic proxy, which then attempts to route the
              >request back to the app server cluster. The proxy must then attempt
              >to open a socket with the cluster so that someone will respond to the
              >request. This first connection to the app server layer requires a
              >first "handshake" with the NES proxy, and these paramters gauge how
              >long the proxy should wait before it gets that first handshake before
              >retrying. It should try to get any app server to respond within
              >ConnectRetrySecs, retrying every ConnectRetrySecs until it hits
              >ConnectTimeoutSecs, at which time it will stop asking the cluster for
              >a connection and return an error status 503 to the end-user (i.e. that
              >ugly NSAPI failure page).
              >
              >In short, I believe that only one request to get work done will ever
              >be sent back to the app server layer even upon retry. Which is good,
              >'cause otherwise it'd go into some crazy spin-lock condition.
              >
              >This is different from what we thought it should do in the past. We
              >incorrectly believed that these parameters should be set for the time
              >it takes to get the response for the ENTIRE jsp request (i.e. we made
              >a connection to the app server, requested that it should do work, and
              >this was how long it was going to wait before retrying the work
              >request). It turns out that the HungServerRecoverSecs parameter is
              >more for that. Thats the length of time that the proxy will wait
              >after a work request before declaring that a particular app server has
              >fallen out of the cluster, and therefore should no longer be used to
              >do any work. Since this time IS dependant on how long it takes us to
              >perform any work request (i.e. whats the longest time it takes any JSP
              >to render under our highest load), this number should be set VERY
              >high. 300 is probably a little high, but workable for us, so thats
              >probably ok. However, 300 seconds is 5 minutes. If a server hasn't
              >responded to a work request in that long, we probably have bigger
              >problems.
              >
              >IF the above are correct, then setting ConnectRetrySecs to 2 MAY give
              >us some marginally better load-balancing in the cluster, but I doubt
              >that we'll see any appreciable difference under our current load
              >anyways.
              >--------------------------
              >We also see "failure" Netscape error messages when the cluster is
              >under heavy load which result in "Connect Reset by Peer" and "Resource
              >Temorarily Available" each of these referring to an error in
              >proxy.cpp...
              >
              >Thanks..
              >
              > Ruth
              

  • PHP as CGI (Shell-CGI)

    Hi Everybody,
    I am new to Web Servers and as a Java Developer I have decided to start
    with Sun ONE Web Server 6.1SP1. Till now I have been able to configure
    Servlet and JSPs' but not been able to configure PHP. As Zend enabler is
    not free I had to look for alternatives and then I found one in the PHP.net
    site, which is as follows:
    Copy the php files on your server
    Get the php zip file http://www.php.net/
    Edit php.ini-dist
    rename php.ini-dist to php.ini
    Edit php.ini : Indicate in which directory you have copied youre php files. (extension_dir = d:\php4\extensions ; directory in which the loadable extensions (modules) reside.)
    copy php.ini in youre windows directory (c:\winnt)
    Make a file association under Windows NT
    In a DOS Window (do not copy this two lines in a batch file! because of %1), type assoc .php=PHPScript
    ftype PHPScript=d:\php4\php.exe %1 %*
    2nd step : Configuring Netscape Enterprise Server for PHP
    Specifying shell-CGI as Filetype
    Due to a bug of the Nestcape/iPlanet administration console,
    you have to create a dummy shell-cgi directory (for ex:/dummy maps c:/temp)
    Remove it just after, (it will create 4 lines in obj.conf)
    If you don't do that you will get (no way to service request in the netscape error log)
    First Activate CGI as a file type
    From the Server Manager of NES 3.6.x, choose Programs|CGI File Type and Set the Radio Group to 'YES'
    Click here for screenshot
    From the Server Manager of NES 3.6.x, choose Server Preferences|MIME Types.
    On the MIME Types page, add a new MIME type.
    Set the Type field to type, and the content type to magnus-internal/shellcgi
    In the File Suffix field, enter php Click here for screenshot
    Test the 2nd step
    Put the test.php file in the document root of your server
    Then type http://server/test.php
    If you can see "nothing to write" in your browser then it works!
    But after doing all these works yet PHP program does not work. I am using Windows XP &
    PHP 4.3.4. My queries are:
    1. Is it possible to configure Sun ONE Web Server in this way?
    2. If so then what went wrong?
    3. If not then someone please tell how it can be done?
    Waiting for the reply and THANKS in advance for your assistance.

    I am also getting the same log when I am configuring php on sun one webserver 6.1 sp8 as CGI.
    But as for fastcgi I am getting the below log
    [10/Aug/2007:14:26:32] info ( 2656): CORE1116: Sun ONE Web Server 6.1SP8 B06/14/2007 11:35 [10/Aug/2007:14:26:32] info ( 2656): FCGI1000: Sun ONE Web Server 6.1SP5 FastCGI NSAPI Plugin B06/29/2005 06:03 [10/Aug/2007:14:26:32] info ( 2656): CORE5076: Using [Java HotSpot(TM) Server VM, Version 1.5.0_06] from [Sun Microsystems Inc.] [10/Aug/2007:14:26:32] info ( 2656): WEB0100: Loading web module in virtual server [https-cgi.com] at [search] [10/Aug/2007:14:26:34] info ( 2656): HTTP3072: [LS ls1] http://dev1:7001 ready to accept requests [10/Aug/2007:14:26:34] info ( 2656): CORE3274: successful server startup
    [10/Aug/2007:15:05:24] warning ( 2656): for host 10.129.149.193 trying to GET /fcgi/php, send-file reports: HTTP4142: can't find C:/Sun/WebServer6.1/docs/fcgi/php (File not found)
    ============
    fcgi/php is the uri configured in obj.conf file
    but I am not able to execute php,if any body knows execution,please help me
    Thanks in advance

  • Error when starting Netscape Calendar Server: Module: , Label: 355, Service error: #0x13209

    When starting Netscape Calendar Server, the following error message appears:
    <BR><P>
    Module: , Label: 355, Service error: #0x13209
    <P>
    The three ACIs listed below need to be present in the Directory Server in order
    for Calendar server to work properly. Check the properties on the Base DN to
    verify that the following ACIs exist. If they are not present, you will need
    to add them, and the Base DN will need to be modified for your enviroment.
    <P>
    <OL>
    <LI>ACI for allowing users to modify their own entries.<BR>
    <P>
    (targetattr = "*")(version 3.0; acl "Allow self entry modification";
    allow (write)userdn = "ldap:///self";)<BR>
    <P>
    <LI>ACI for allowing anyone permissions to Read, Search, and Compare.<BR>
    <P>
    (target="ldap:///o=basedn.com") (targetattr != "userPassword") (version
    3.0; acl "Anonymous access";
    allow (read, search, compare) userdn = "ldap:///anyone";)<BR>
    <P>
    <LI>ACI for allowing Calendar Server admins Write access to the Base DN
    (this is necessary in order for admins to add users and resources to the node).
    <BR><P>
    (target="ldap:///o=basedn.com") (targetattr = "*") (version 3.0; acl
    "Calendar Administrators Group";<BR>
    allow(all) groupdn = "ldap:///cn=Calendar Server Admins,ou=Netscape
    Servers,o=basedn.com";)<BR>
    </OL>

    Hi Trinidad,
    Thanks for your help!!!
    1.
    I didn't install EventSender and DIProxy yet, I tried first to upload and deploy the zip files, but I couldn't open the Itegration Application Explorer.
    2.
    The jvm.dll file is in in the folder pointed by the logs: C:\Program Files (x86)\SAP\SAP Business One Integration\jdk1.5.0_xx_sap\jre\bin\server
    and it is also in C:\Program Files (x86)\SAP\SAP Business One Integration\jdk1.5.0_xx_sap_64\jre\bin\server
    I tried running the file  java5w.exe, but I got an error message:
    Access is denied
    Unable to open the service tomcat5
    Thne I managed to open it by "rua as administrator".
    the Java Virtual Machine path is points to the java 1.5 version folder.
    Is it possible that the reason that the service can't start is related to administrator rigts??
    In the properties in the Integration Service (services.msc):
    It is set to be run with the local system account.
    all other properties looks fine.
    in the properties of the tomcat5.exe (and tomcat5w.exe  , I tried both)
    In the Compatibility tab I tried setting the flag "Run this program in compatibility mode for" to Vista, windows 7, and server 2008
    I didn't have the option of Windows XP.
    I have also set the Privilege level of: "Run this program as administrator" to true.
    But still the service won't start.
    What can be the problem?
    What else can I check?
    Thanks a lot,
    Chana

  • I've checked my current plugins and it still shows Adobe Acrobat Version 7 for Netscape (7.0.9.50) I tried to do the update but I got an error - "Please tell Microsoft about this problem" "Send Error Report/ Don't Send".

    I've checked my current plugins and it still shows Adobe Acrobat Version 7 for Netscape (7.0.9.50)
    I tried to do the update but I get the same error each time - "Please tell Microsoft about this problem" "Send Error Report/ Don't Send".
    Also, do I need to Disable or Uninstall the Extension: "SEO For Firefox 3.3.4 as this was highlighted?
    == This happened ==
    Every time Firefox opened
    == When I try to do the update

    http://www.microsoft.com/mac/support
    http://answers.microsoft.com/en-us/mac/forum/macword?auth=1
    http://answers.microsoft.com/en-us/mac/forum/macoffice2011-macword/microsoft-wor d-for-mac-2011-will-not-open-error/ecc42616-6f49-40bb-b8f5-e21c711ea359

  • Using JSSE : "Invalid Netscape CertType extension for SSL client" Error

    Hi all,
    Im using the sample code given sun site for JSSE with Client Authentication. The sample as such it worked with the testkeys provided in that. But it didn't workout when I tried using other certificates.
    Both client and server certificates I generated from our internal Netscape Certificate Manager.
    Function of the server :
    The server will read a private key from the given keystore and starts listening on a port. This server will server only GET request.
    Function of the client :
    The Client sends a GET request to the server and gets the response back.
    I simply changed the key store name alone in the working sample code.
    It is not working.
    The Exception thrown on client side :
    D:\users\Jp\java\jssesamples\sockets\client\class>java SSLSocketClientWithClientAuth1 localhost 1089 /urls
    localhost
    1089
    /urls
    java.net.SocketException: Software caused connection abort: socket write error
    at java.net.SocketOutputStream.socketWrite0(Native Method)
    at java.net.SocketOutputStream.socketWrite(SocketOutputStream.java:92)
    at java.net.SocketOutputStream.write(SocketOutputStream.java:136)
    at com.sun.net.ssl.internal.ssl.OutputRecord.a(DashoA6275)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
    at com.sun.net.ssl.internal.ssl.SunJSSE_ax.a(DashoA6275)
    at com.sun.net.ssl.internal.ssl.SunJSSE_az.j(DashoA6275)
    at com.sun.net.ssl.internal.ssl.SunJSSE_az.a(DashoA6275)
    at com.sun.net.ssl.internal.ssl.SunJSSE_az.a(DashoA6275)
    at com.sun.net.ssl.internal.ssl.SunJSSE_ax.a(DashoA6275)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.j(DashoA6275)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(DashoA6275)
    at SSLSocketClientWithClientAuth1.main(SSLSocketClientWithClientAuth1.java:119)
    Exception thrown on server side :
    D:\users\Jp\java\jssesamples\sockets\server\class>java ClassFileServer 1089 . TLS true
    USAGE: java ClassFileServer port docroot [TLS [true]]
    If the third argument is TLS, it will start as
    a TLS/SSL file server, otherwise, it will be
    an ordinary file server.
    If the fourth argument is true,it will require
    client authentication as well.
    javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: Invalid Netscape CertType extension for SSL client
    at com.sun.net.ssl.internal.ssl.BaseSSLSocketImpl.a(DashoA6275)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
    at com.sun.net.ssl.internal.ssl.SunJSSE_aw.a(DashoA6275)
    at com.sun.net.ssl.internal.ssl.SunJSSE_aw.a(DashoA6275)
    at com.sun.net.ssl.internal.ssl.SunJSSE_ax.a(DashoA6275)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.j(DashoA6275)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
    at com.sun.net.ssl.internal.ssl.AppInputStream.read(DashoA6275)
    at sun.nio.cs.StreamDecoder$CharsetSD.readBytes(StreamDecoder.java:406)
    at sun.nio.cs.StreamDecoder$CharsetSD.implRead(StreamDecoder.java:446)
    at sun.nio.cs.StreamDecoder.read(StreamDecoder.java:180)
    at java.io.InputStreamReader.read(InputStreamReader.java:167)
    at java.io.BufferedReader.fill(BufferedReader.java:136)
    at java.io.BufferedReader.readLine(BufferedReader.java:299)
    at java.io.BufferedReader.readLine(BufferedReader.java:362)
    at ClassServer.getPath(ClassServer.java:162)
    at ClassServer.run(ClassServer.java:109)
    at java.lang.Thread.run(Thread.java:536)
    Caused by: java.security.cert.CertificateException: Invalid Netscape CertType extension for SSL client
    at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.a(DashoA6275)
    at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.a(DashoA6275)
    at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.a(DashoA6275)
    at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkClientTrusted(DashoA6275)
    at com.sun.net.ssl.internal.ssl.JsseX509TrustManager.checkClientTrusted(DashoA6275)
    ... 17 more
    error writing response: Connection has been shutdown: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateExce
    ption: Invalid Netscape CertType extension for SSL client
    javax.net.ssl.SSLException: Connection has been shutdown: javax.net.ssl.SSLHandshakeException: java.security.cert.Certificate
    Exception: Invalid Netscape CertType extension for SSL client
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.d(DashoA6275)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.e(DashoA6275)
    at com.sun.net.ssl.internal.ssl.AppOutputStream.write(DashoA6275)
    at com.sun.net.ssl.internal.ssl.AppOutputStream.write(DashoA6275)
    at java.io.DataOutputStream.writeBytes(DataOutputStream.java:256)
    at ClassServer.run(ClassServer.java:128)
    at java.lang.Thread.run(Thread.java:536)
    Caused by: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: Invalid Netscape CertType extension
    for SSL client
    at com.sun.net.ssl.internal.ssl.BaseSSLSocketImpl.a(DashoA6275)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
    at com.sun.net.ssl.internal.ssl.SunJSSE_aw.a(DashoA6275)
    at com.sun.net.ssl.internal.ssl.SunJSSE_aw.a(DashoA6275)
    at com.sun.net.ssl.internal.ssl.SunJSSE_ax.a(DashoA6275)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.j(DashoA6275)
    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
    at com.sun.net.ssl.internal.ssl.AppInputStream.read(DashoA6275)
    at sun.nio.cs.StreamDecoder$CharsetSD.readBytes(StreamDecoder.java:406)
    at sun.nio.cs.StreamDecoder$CharsetSD.implRead(StreamDecoder.java:446)
    at sun.nio.cs.StreamDecoder.read(StreamDecoder.java:180)
    at java.io.InputStreamReader.read(InputStreamReader.java:167)
    at java.io.BufferedReader.fill(BufferedReader.java:136)
    at java.io.BufferedReader.readLine(BufferedReader.java:299)
    at java.io.BufferedReader.readLine(BufferedReader.java:362)
    at ClassServer.getPath(ClassServer.java:162)
    at ClassServer.run(ClassServer.java:109)
    ... 1 more
    Caused by: java.security.cert.CertificateException: Invalid Netscape CertType extension for SSL client
    at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.a(DashoA6275)
    at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.a(DashoA6275)
    at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.a(DashoA6275)
    at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkClientTrusted(DashoA6275)
    at com.sun.net.ssl.internal.ssl.JsseX509TrustManager.checkClientTrusted(DashoA6275)
    ... 17 more
    The Client code :
    * @(#)SSLSocketClientWithClientAuth.java     1.5 01/05/10
    * Copyright 1995-2002 Sun Microsystems, Inc. All Rights Reserved.
    * Redistribution and use in source and binary forms, with or
    * without modification, are permitted provided that the following
    * conditions are met:
    * -Redistributions of source code must retain the above copyright
    * notice, this list of conditions and the following disclaimer.
    * -Redistribution in binary form must reproduct the above copyright
    * notice, this list of conditions and the following disclaimer in
    * the documentation and/or other materials provided with the
    * distribution.
    * Neither the name of Sun Microsystems, Inc. or the names of
    * contributors may be used to endorse or promote products derived
    * from this software without specific prior written permission.
    * This software is provided "AS IS," without a warranty of any
    * kind. ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND
    * WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY,
    * FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT, ARE HEREBY
    * EXCLUDED. SUN AND ITS LICENSORS SHALL NOT BE LIABLE FOR ANY
    * DAMAGES OR LIABILITIES SUFFERED BY LICENSEE AS A RESULT OF OR
    * RELATING TO USE, MODIFICATION OR DISTRIBUTION OF THE SOFTWARE OR
    * ITS DERIVATIVES. IN NO EVENT WILL SUN OR ITS LICENSORS BE LIABLE
    * FOR ANY LOST REVENUE, PROFIT OR DATA, OR FOR DIRECT, INDIRECT,
    * SPECIAL, CONSEQUENTIAL, INCIDENTAL OR PUNITIVE DAMAGES, HOWEVER
    * CAUSED AND REGARDLESS OF THE THEORY OF LIABILITY, ARISING OUT OF
    * THE USE OF OR INABILITY TO USE SOFTWARE, EVEN IF SUN HAS BEEN
    * ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
    * You acknowledge that Software is not designed, licensed or
    * intended for use in the design, construction, operation or
    * maintenance of any nuclear facility.
    import java.net.*;
    import java.io.*;
    import javax.net.ssl.*;
    import javax.security.cert.X509Certificate;
    import java.security.KeyStore;
    * This example shows how to set up a key manager to do client
    * authentication if required by server.
    * This program assumes that the client is not inside a firewall.
    * The application can be modified to connect to a server outside
    * the firewall by following SSLSocketClientWithTunneling.java.
    public class SSLSocketClientWithClientAuth1 {
    public static void main(String[] args) throws Exception {
         String host = null;
         int port = -1;
         String path = null;
         for (int i = 0; i < args.length; i++)
         System.out.println(args);
         if (args.length < 3) {
         System.out.println(
              "USAGE: java SSLSocketClientWithClientAuth " +
              "host port requestedfilepath");
         System.exit(-1);
         try {
         host = args[0];
         port = Integer.parseInt(args[1]);
         path = args[2];
         } catch (IllegalArgumentException e) {
         System.out.println("USAGE: java SSLSocketClientWithClientAuth " +
              "host port requestedfilepath");
         System.exit(-1);
         try {
         * Set up a key manager for client authentication
         * if asked by the server. Use the implementation's
         * default TrustStore and secureRandom routines.
         SSLSocketFactory factory = null;
         try {
              SSLContext ctx;
              KeyManagerFactory kmf;
              KeyStore ks;
              char[] passphrase = "passphrase".toCharArray();
              ctx = SSLContext.getInstance("TLS");
              kmf = KeyManagerFactory.getInstance("SunX509");
              ks = KeyStore.getInstance("JKS");
    //          ks.load(new FileInputStream("testkeys"), passphrase);
              ks.load(new FileInputStream("clientkey"), passphrase);
              kmf.init(ks, passphrase);
              ctx.init(kmf.getKeyManagers(), null, null);
              factory = ctx.getSocketFactory();
         } catch (Exception e) {
              throw new IOException(e.getMessage());
         SSLSocket socket = (SSLSocket)factory.createSocket(host, port);
         * send http request
         * See SSLSocketClient.java for more information about why
         * there is a forced handshake here when using PrintWriters.
         socket.startHandshake();
         PrintWriter out = new PrintWriter(
                        new BufferedWriter(
                        new OutputStreamWriter(
                        socket.getOutputStream())));
         out.println("GET " + path + " HTTP/1.1");
              /* Some internet sites throw bad request error for HTTP/1.1 req if hostname is not specified so the foll line */
              out.println("Host: " + host);
         out.println();
         out.flush();
         * Make sure there were no surprises
         if (out.checkError())
              System.out.println(
              "SSLSocketClient: java.io.PrintWriter error");
         /* read response */
         BufferedReader in = new BufferedReader(
                        new InputStreamReader(
                        socket.getInputStream()));
         String inputLine;
         while ((inputLine = in.readLine()) != null)
              System.out.println(inputLine);
         in.close();
         out.close();
         socket.close();
         } catch (Exception e) {
         e.printStackTrace();
    The Server code :
    * @(#)ClassFileServer.java     1.5 01/05/10
    * Copyright 1995-2002 Sun Microsystems, Inc. All Rights Reserved.
    * Redistribution and use in source and binary forms, with or
    * without modification, are permitted provided that the following
    * conditions are met:
    * -Redistributions of source code must retain the above copyright
    * notice, this list of conditions and the following disclaimer.
    * -Redistribution in binary form must reproduct the above copyright
    * notice, this list of conditions and the following disclaimer in
    * the documentation and/or other materials provided with the
    * distribution.
    * Neither the name of Sun Microsystems, Inc. or the names of
    * contributors may be used to endorse or promote products derived
    * from this software without specific prior written permission.
    * This software is provided "AS IS," without a warranty of any
    * kind. ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND
    * WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY,
    * FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT, ARE HEREBY
    * EXCLUDED. SUN AND ITS LICENSORS SHALL NOT BE LIABLE FOR ANY
    * DAMAGES OR LIABILITIES SUFFERED BY LICENSEE AS A RESULT OF OR
    * RELATING TO USE, MODIFICATION OR DISTRIBUTION OF THE SOFTWARE OR
    * ITS DERIVATIVES. IN NO EVENT WILL SUN OR ITS LICENSORS BE LIABLE
    * FOR ANY LOST REVENUE, PROFIT OR DATA, OR FOR DIRECT, INDIRECT,
    * SPECIAL, CONSEQUENTIAL, INCIDENTAL OR PUNITIVE DAMAGES, HOWEVER
    * CAUSED AND REGARDLESS OF THE THEORY OF LIABILITY, ARISING OUT OF
    * THE USE OF OR INABILITY TO USE SOFTWARE, EVEN IF SUN HAS BEEN
    * ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
    * You acknowledge that Software is not designed, licensed or
    * intended for use in the design, construction, operation or
    * maintenance of any nuclear facility.
    import java.io.*;
    import java.net.*;
    import java.security.KeyStore;
    import javax.net.*;
    import javax.net.ssl.*;
    import javax.security.cert.X509Certificate;
    /* ClassFileServer.java -- a simple file server that can server
    * Http get request in both clear and secure channel
    * The ClassFileServer implements a ClassServer that
    * reads files from the file system. See the
    * doc for the "Main" method for how to run this
    * server.
    public class ClassFileServer extends ClassServer {
    private String docroot;
    private static int DefaultServerPort = 2001;
    * Constructs a ClassFileServer.
    * @param path the path where the server locates files
    public ClassFileServer(ServerSocket ss, String docroot) throws IOException
         super(ss);
         this.docroot = docroot;
    * Returns an array of bytes containing the bytes for
    * the file represented by the argument <b>path</b>.
    * @return the bytes for the file
    * @exception FileNotFoundException if the file corresponding
    * to <b>path</b> could not be loaded.
    public byte[] getBytes(String path)
         throws IOException
         System.out.println("reading: " + path);
         File f = new File(docroot + File.separator + path);
         int length = (int)(f.length());
         if (length == 0) {
         throw new IOException("File length is zero: " + path);
         } else {
         FileInputStream fin = new FileInputStream(f);
         DataInputStream in = new DataInputStream(fin);
         byte[] bytecodes = new byte[length];
         in.readFully(bytecodes);
         return bytecodes;
    * Main method to create the class server that reads
    * files. This takes two command line arguments, the
    * port on which the server accepts requests and the
    * root of the path. To start up the server: <br><br>
    * <code> java ClassFileServer <port> <path>
    * </code><br><br>
    * <code> new ClassFileServer(port, docroot);
    * </code>
    public static void main(String args[])
         System.out.println(
         "USAGE: java ClassFileServer port docroot [TLS [true]]");
         System.out.println("");
         System.out.println(
         "If the third argument is TLS, it will start as\n" +
         "a TLS/SSL file server, otherwise, it will be\n" +
         "an ordinary file server. \n" +
         "If the fourth argument is true,it will require\n" +
         "client authentication as well.");
         int port = DefaultServerPort;
         String docroot = "";
         if (args.length >= 1) {
         port = Integer.parseInt(args[0]);
         if (args.length >= 2) {
         docroot = args[1];
         String type = "PlainSocket";
         if (args.length >= 3) {
         type = args[2];
         try {
         ServerSocketFactory ssf =
              ClassFileServer.getServerSocketFactory(type);
         ServerSocket ss = ssf.createServerSocket(port);
         if (args.length >= 4 && args[3].equals("true")) {
              ((SSLServerSocket)ss).setNeedClientAuth(true);
         new ClassFileServer(ss, docroot);
         } catch (IOException e) {
         System.out.println("Unable to start ClassServer: " +
                   e.getMessage());
         e.printStackTrace();
    private static ServerSocketFactory getServerSocketFactory(String type) {
         if (type.equals("TLS")) {
         SSLServerSocketFactory ssf = null;
         try {
              // set up key manager to do server authentication
              SSLContext ctx;
              KeyManagerFactory kmf;
              KeyStore ks;
              char[] passphrase = "passphrase".toCharArray();
              ctx = SSLContext.getInstance("TLS");
              kmf = KeyManagerFactory.getInstance("SunX509");
              ks = KeyStore.getInstance("JKS");
    //          ks.load(new FileInputStream("testkeys"), passphrase);
              ks.load(new FileInputStream("serverkey"), passphrase);
              kmf.init(ks, passphrase);
              ctx.init(kmf.getKeyManagers(), null, null);
              ssf = ctx.getServerSocketFactory();
              return ssf;
         } catch (Exception e) {
              e.printStackTrace();
         } else {
         return ServerSocketFactory.getDefault();
         return null;
    Could anyone help ?
    thanks in advance
    Jayaprakash

    The same thing.
    I have found the place where the exception throws.
    It is com.sun.net.ssl.internal.ssl.AVA class.
    It has a constructor AVA(StringReader)
    There is a check in this constructor of different certificate extensions
    (if-else). If it sees no familiar extension it throws exception and handshake fails.
    It is not difficult to fix this problem: just ignore unknown extension.
    Everything works fine with this "improved" class (under VA 3.5).
    But the problem is - the using of this class in applets.
    How can I say the browser to use my "improved" class and not the one it downloaded with java plug-in?

Maybe you are looking for