Problem in connecting to LDAP DS with iPlanet 4.1 Web server

We have a web application deployed in iPlanet4.0 web server, we are using Sun One directory server for authentication.( Thru JNDI - Package javax.naming.ldap)
The Problem :
The problem is that, I am able to do the LDAP related operations anly a few times, after which the below stated exception results. Following this exception, I cannot connect to the directory server again, unless I restart the webserver. For all my operations I establish a fresh context.
The Exception :
java.lang.IllegalMonitorStateException: current thread not owner Exception

Is tghe user id and password that it is requesting for OID? If so then you have several options. You can supply a user DN and password for a know user. For instance, if you have a user DN of cn=jdoe,ou=slaes,o=acme this would be the user is or DN that you need. This DN would have a password attribute associated with it and that would be the password.
Second, OID has a super user DN called cn=orcladmin. The default password for this su is manager.
Hope this helps.
Jay
null

Similar Messages

IPlanet 4.1 Web Server - ns-cron process hangs for log rotation

Does anybody know if there is a known issue with iPlanet 4.1 Web Server where the ns-cron log rotation process hangs up?
Basically it won't rotate any logs, and using either the "Stop" or "Restart" buttons in the console won't shut it down, so you have to kill it manually, then start it again.
It seems like it will run for a couple days fine, then it will hang up.
Thanks.

Nope, I've not seen this before. But 4.1 version is really old and no longer supported, you should consider upgrading to a supported version.

Problem with inbuilt Solaris Apache Web Server v 2.0.58

Hi,
Set-up:
We are working on a custom application which works with the inbuilt Apache Web Server on the Sun Solaris platform. Here are the details of the versions of the various components involved:
Apache Web Server: Version 2.0.58
Platform: SunOS 5.10 Generic_127111-03
Our application is in the form of a shared library(.so binary) which is loaded into the Apache Web Server by mentioning the following directive in the Apache Web Server's configuration file (httpd.conf).
LoadModule at_module "/var/apache2/logs/sample/sample.so"
where, sample.so is our application's binary
and at_module is the name of the module.
httpd.conf file has been attached for your reference.
Attachments:
httpd.conf - Apache Web Server's configuration file.
sample-apache.cpp - Sample program which is showing the problem.
httpd.h - Apache Software Foundation's file which contains the structure "request_rec" that represents the current request.
Problem summary:
For each request to the Apache Web server, the server maintains a table of type "apr_table_t" which contains the header environment from the request. There is a structure "request_rec" maintained in the httpd.h file:
/** A structure that represents the current request */
struct request_rec {
/** The pool associated with the request */
apr_pool_t *pool;
/** Request method (eg. GET, HEAD, POST, etc.) */
const char *method;
/** MIME header environment from the request */
apr_table_t *headers_in;
In our case, when we try to retrieve the address of "headers_in", we get a NULL Value. Please refer to the attached "sample-apache.cpp" program. In this program, inside the access_checker() method, we try to retrieve the address of "headers_in" and get that as NULL:
extern "C" int access_checker(request_rec *r)
     FILE * fp;
     fp = fopen("/var/apache2/logs/sample.txt", "a");
     fprintf(fp, "\n r->headers_in = %u, r->method = %s", r->headers_in, r->method);
     fclose(fp);
     return OK;
Here is the output of the sample program after accessing the main page of the Web server:
r->headers_in = 0, r->method = GET
r->headers_in = 0, r->method = GET
r->headers_in = 0, r->method = GET
Though we are able to retrieve one member of the structure request_rec (method), we are not able to retrieve the address of the other member (headers_in).
Observation:
We made an interesting observation that when we used the same sample program with the inbuilt Apache 2.0.52 Web Server on Solaris, we were able to successfully retrieve the address of headers_in. Here are the details of the set-up which is working fine:
Apache Web Server: Version 2.0.52
Platform : SunOS 5.10 Generic_118822-30
Thus, there is something different which has happened between the Sun's Solaris Apache Web Server's versions 2.0.52 and 2.0.58 which is making it unable to retrieve the address of the request headers (headers_in).
I am requesting someone to kindly shed light on this difference and let us know if we need to change the way of retrieving the request headers for Solaris Apache 2.0.58.
Thanks,
Atul.

The only way you can achieve it is by running the web server to listen on port 80
Please change the port in your httpd.conf file for the webserver and restart it.
If any other processes are running/using on port 80 on that machine, then please stop them, otherwise you will not be able to achieve your requirement.
Arun

Installing 64-bit ColdFusion with 32-bit Apache web server on Windows Server 2008 64-bit

This is related to another discussion that had a solution of using an unofficial 64-bit Apache, which is not permitted in my situation. The discussion is here: http://forums.adobe.com/message/3580001.
I’m having trouble running the Apache and ColdFusion services after connecting the two with wsconfig. I’ve tried replacing the 64-bit mod_jrun22.so with the 32-bit equivalent and the Apache service will then start, but the ColdFusion services error when loading the jvm.dll.
Anyone familiar with this?
Apache Web Server 2.2.22
ColdFusion 9
Thanks.

Looking into the same issue myself. Can you elaborate on this? Which version of the JVM did you upgrade to and did you configure it in the CF Admin to use that jvm?
Using the web connector, I get an error message that the mod_jrun22.so is not a valid win32 application.
Thanks

Problem on connect to two servers with SSL

Hey all!
I've got a problem with connecting to two different servers via SSL in one Application. Every Connection works fine on its one via SSL.
But if i try to initialize a new connection it fails every time.
My thought is that the problem is the DriverManager. I'm not quite sure how this DriverManager works, but what i know is that it's a single-ton Class and with that maybe stores some parameters from the first connection which didn't get reloaded when trying to make a new connection.
Here's the way i create the connection ..
    String host="best.host.ever";
    int port="3306";
    String MYSQL_URL="jdbc:mysql://"+this.host+":"+this.port+"/";
    DBName="db_foobar";
    sqlProps = new Properties();
    sqlProps.setProperty("user","foo");
    sqlProps.setProperty("password","bar");
    sqlProps.setProperty("zeroDateTimeBehavior","convertToNull");
    sqlProps.setProperty("useSSL","true");
    System.setProperty("javax.net.ssl.trustStore", trustStore);
    System.setProperty("javax.net.ssl.trustStorePassword", "trustpass");
    System.setProperty("javax.net.ssl.keyStore", keyStore);
    System.setProperty("javax.net.ssl.keyStorePassword", "keypass");
    System.setProperty("javax.net.debug","ssl");
    printDebug("[Konstruktor] : Connecting to "+MYSQL_URL);
    try {
         Class.forName("org.gjt.mm.mysql.Driver").newInstance();
         this.conn = DriverManager.getConnection(MYSQL_URL+DBName,sqlProps);
        connectionCount++;
        initOK=true;
    //Catch stuff following...Is it possible that the System.properties i'm setting are only readed one time by the DriverManager (if it's readed by the DriverManager at all)?
So when i initialize a new Object with different System.properties they may not get used again.
Hopefully somebody has an explanation or a solution for this.
Besides: If i launch the programm twice it's no problem to have to differen SSL connections at the same time.
Thanks for reading and in advance for trying to help!

Yep, it's the standard authentication failure message. (The error code is 1045).
The Exception which is thrown is a SQLException with the message:
Access denied for user 'username'@'p54BB743D.dip.t-dialin.net' (using password: YES)
errorcode: 1045
The code i'm using runs well with one connection and even with multiple connections as long as not more than one connection are using SSL.
To explain:
The user has the possibility to run the application with a user defined data-source (the connection). You can add a new connection and the application will then add a tabbed pane with the same gui but uses the other data source then.
This runs fine with multiple connections (I managed to work on 3 differen intranet servers and 2 different servers online, one of them using SSL)
So all together 5 Connections. Now i wanted to add a 6th server with SSL two and thats the point where it crashes. (Both SSL Servers run perfect on their own with my application - only both together doesnt work).
About that: Class.forName, yes i'm using it every time when i make a new Connection. This is wrong? Could you explain why?
Anyway thanks for your answers so far!
Message was edited by:
Hotkey_ger

Connection problem while connecting to LDAP resource via SSL

Hi,
I am facing problem in connecting LDAP via SSL. I got the self signed certificate from the LDAP team and while importing it to the JVM keystore using command "keytool -import -file PathTo/ds-cert.txt -keystore ./cacerts -storepass changeit -trustcacerts", I am getting error "keytool error: java.security.SignatureException: Signature does not match". Since I am not able to import the cert, I am facing problem in connetcing to LDAP via SSL. I have gone thru other posts and found some answers for it.. but not able to do it correctly. I am using SIM 7.1 and tomcat. In some posts, I have seen, in the resource config wizard, use "true" instead of 1 in the SSL field.. For SIM 7.1, does the value 1 work?. Please help me in importing the cert to my local JVM keystore.
Thanks.
Edited by: dj123 on Oct 15, 2008 1:50 PM

Make sure you are importing the certificate of the issuer (CA) that issued the LDAP certificate, not the LDAP cert itself.

I have problems to connect my iphone 6 with IOS 8.0.2 to my citroen c5.

My iphone 6 has problems to connect to my citron c5 via bluetooth. After several attempts I was able to pair the phone to the car but neither are the contacts from the phone accessible by the car nor is can I successfully create calls using the car.

I was having problems with this too. I remember it working okay in iOS 7 and then it breaking in iOS 8.
Fortunately, I'm now on the iOS 8.1 beta, and can confirm it's working fine for me. Just how it used to. - I guess that's one of the bugs that Apple's new software will bust. We'll just have to wait it out.

Problem while connecting through ldap console

hi ,
we have our directory server 5.2 sp4 on red hat linux 4.
i am able to connect through ldap broswer and ldapsearch is working but when i mtrying to connect through console it is saying as incorrect password or directory problem.i m not able to figure out what can be the problem. any help is appreciated.
Thanks
Message was edited by:
ap7926

yes admin server is up and here is the log
- Sun Java(TM) System Directory Server/5.2_Patch_4 B2005.230.0415 (32-bit) starting up
[18/Aug/2007:09:55:11 -0400] - Listening on all interfaces port 389 for LDAP requests
[18/Aug/2007:09:55:11 -0400] - slapd started.
[18/Aug/2007:09:55:11 -0400] - INFO: 100 entries in the directory database.
[18/Aug/2007:09:55:11 -0400] - INFO: add:0, modify:0, modrdn:0, search:0, delete:0, compare:0, bind:0 since startup.
and here is log from access
conn=37 op=-1 msgId=-1 - fd=30 slot=30 LDAP connection from 192.168.1.43 to 192.168.1.4
conn=37 op=-1 msgId=-1 - closing - B1
conn=37 op=-1 msgId=-1 - closed.

OS 10.7, SMB Connection, Change to Unicode with Extended Security on Windows Server 2008 Standard

Hi All, I've searched Google, and I've also contacted Apple Support with no luck: I want to implement unicode with extended security on Windows Server 2008 Standard server shared folders so that Lion can connect normally (i.e. Finder->Go->Connect to Server->IP Address or server name) to SMB shares and access files. I'm lacking information; has anyone actually implemented unicode with extended security? If so, how?
Thanks in advance.
Tom

Thanks for the reply aorlich. Do you mean enable file sharing on my Mac? With file sharing enabled, I still cannot get to my Windows 7 shares, although the files on my Mac do become available to Windows. Thanks again.

Accesing Oracle 8i Database from iPlanet (Sun ONE) web server

Hi all,
I am trying to set up basic authentication mechanism on an iPlanet web server hosted web application. Instead of using the iPlanet LDAP directory, I would like to access the Oracle RDBMS for userid/password authentication. Does Oracle provide a means/plugin for enabling such communication with the iPlanet web server.
Any help would be highly appreciated.
Thanks,
Kavita

This just happened to me.
The problem is that iPlanet seems to goof up if you insert any non-alphabetical characters (such as underscore) into your virtual server class name.
To resolve this issue I had to open up the backups.conf file located in the conf_bk subfolder under your server folder.
<server root>\conf_bk\backups.conf
There are three sections divided by an empty line. The first section is 1 line and just has the version #, something like this:
backups.conf:Version 4.0
The next section has a list of conf files to keep backups of, when the last backup was made, etc..
The problem is that in deleting the obj.conf file for the virtual class, iPlanet does NOT remove the entry from this file for that virtual server class. You need to do this manually.
So locate the line in this section (most probably the last line in this section) that contains (virtual server class name).conf in it and delete that line.
You should now be able to operate as normal.
This is an aggravating bug that I hope has been addressed in iPlanet 6.1

How to connect my appication to the internet without using web server?

I'm doing my final project. It is an client/server application and using gprs as the carrier. But i have a problem in connecting the application to the internet!How to set its application IP?Do u have the example code?

hi
no you dont require to set any IP address
but make sure that you have proper GPRS connection, once you have that it will automatically set the IP address!!
if you are in india then there is two kind of GPRS service avail one is normal GPRS and other is Advance GPRS
in this case you have to have Advacne GPRS!!
[email protected]

LDAP is not working on new Web Server

Hi, I configured LDAP authentication and it was working fine. After this I installed a new web server. I copied the security certificate etc ( copied everything from other web server) onto new webserver. When I try to login into Infoview or CMC then I get error message "Security plugin error: Failed to set parameters on plugin" from the new web server. Its working fine from the old web servers.
Not sure what else I have to do now as I have done the same thing on old servers in the past.
We are on BOXI R2 SP3 with web server on IIS 6.0. We have three web servers and 3 processing servers ( with all services) in cluster env.
Thanks,

I am sorry I got confused with Pure Enterise authentication. I should have referred to my notes. I apologize for this. Web application server is involved in communicating to LDAP. Below is the process
1) User logs into the application
2) Web application server security plugin sends credential to LDAP directory
3) LDAP directory authenticate users.
4) Web application server's security plugin sends users credential to LDAP
5) CMS requests user and group info from LDAP
6) The LDAP returns this information to CMS Security plugin
7) CMS will grant access if users is member of mapped group
8) If access is granted then both CMS and WAS plugin create a session
9) The WAS sends an enterprise session token to user's browser
I was referring to login into Infoview using LDAP.
Thanks,

Where does WebLogic fit with/beside our custom web-server?

Hi,
I'm just getting started with the WebLogic Application Server and wondering
what it can do for our setup, which looks like the following:
Our web server has a plug-in which parses each html file requested, and
if it contains any of our "custom" tags, passes it on to another "engine".
This "engine" uses our own database, and object server to make queries,
and turn the custom tags into standard HTML. Some custom-tags include
custom links to other "extended" pages, which the "web server extension"
converts to normal HTML links to the custom pages, which will of course
be caught in turn by the intermediary parser when navigated to.
There are probably ways we can stream-line and minimize the steps required
to assemble the standard HTML. However, if anyone has some ideas,
I'm basically just wondering how WebLogic can help improve our architechture
and the performance, with minimal changes at first. Since we do so much
page assembly by parsing the custom tags, I have difficulty seeing how
WebLogic could do caching. The HTML that a custom tag "expands" to
may be state dependent on the underlying database/object server!
Any comments/ideas much appreciated.
Thanks,
Andy

If you need an extra "ZAP" to get people to return,
your site is probably lacking good content. People
won't go to your site just for your fancy applets and
flash animations, you need to have content. Why do so
many people use Google instead of Yahoo? Because
Google's homepage loads faster without all the ads and
other crap that you get on other search sites. Also,
because google performs searches faster than any other
site. Basically you need good content and good
service without distractions.I get the 'content is king' bit although I tend to disagree with the effect that multimedia has on users. I have a MSc by research which looked at the effects of animation on users of e-commerce sites. It does have a positive effect (it did with my results anyway) - hence I would like to build more multimedia into the web site (under construction).
A combination of fast download, intuitive navigation and clear layout can improve usability.
I disagree with the Jakob Nielsen school of thought i.e. text-only web sites with no graphics are the ultimate. He is a usability expert but usability per se does not improve web site stickiness. I digress.
I want to do the server side stuff mentioned above - it is not a question of just pointing at files on the server...if it were that easy, I would not be posting and would hook all my pages to a tight back-end. The much higher wages of web developers compared with web designers should highlight this skill difference.
Also, not many web sites generate dynamic web pages completely differently to each individual user. Broadband (DSL) will bury the text-only 14.4 kbs modem type site (a disgusting remnant of 1995 which was severly restricted due to low modem speeds).

CAC or smart card use with Oracle database and web server

I've been asked to smart card (CAC) enable our Oracle web server and database access. We currently use CAC to access many of our other applications.
Where can I find the following information
Oracle software required (and is it an additional cost)
How to integrate Oracle App server (web server) with CAC.
How would I need to change the database users accounts to be CAC enabled rather than database users accounts.
Thanks
steven jackson
[email protected]
614-692-9768

Virtualisation is not certified for Oracle RAC on Windows.
+Certified Software on Oracle VM [ID 464754.1]+ note states:
Oracle Real Application Clusters (RAC)
    Oracle 10.2.0.4 and up (10gR2) and 11.1.0.7 and up (11gR1) and 11gR2 RAC for Linux x86 and Linux x86_64 certified on Oracle VM
        Guest OS: Oracle Linux 5.1 (and above) RHEL 5.1 (and above) for Linux x86 / Linux x86_64
        Paravirtualized (PV) mode only (Guest OS and drivers)
        Only supported on Oracle VM 2.1.2 and above
        Live-migration of an Oracle RAC VM is supported with Oracle VM 2.2.1 and above.
        Previous versions are not supported. Please refer to this link for best practices.
        Over-committing CPUs is not recommended, but supported with the following restrictions:
            The total amount of VCPUs allocated to guest domains (running Oracle RAC guests), should not exceed
            two times (2x) the amount of real CPUs / cores in the Oracle VM server.
            The amount of VCPUs allocated to a single guest domain should not exceed the amount of real CPUs /
            cores in the Oracle VM server.
            Maintain Oracle VMs default VCPU allocation for dom-0: Oracle VM will allocate 1 VCPU for each real CPU or core to dom-0.
            CPU pinning is only recommended for hard partitioning. If no hard partitioning is required, CPU pinning should not be used.
        Static support only (dynamic support is being planned):
            Dynamic resizing of guest virtual machine is not supported (VCPU, memory and I/O)
            Virtual Machine Pause/Restore of an active Real Application Cluster virtual machine is not supported.

Do client connections need to be sticky to Plug-in web server instance?

Hi,
I'm trying to understand requirements for load-balancing client requests to a
group of web servers on which we will have the NSAPI plug-in installed under iPlanet.
We will have in-memory replication configured in a cluster of weblogic 5.1 servers
behind the web servers.
Do we need to ensure HTTP stickiness from browser to the web servers or can client
requests be sent to any web server containing the plug-in during a session?
Thanks in advance,
Julian

They can be sent to any of the webservers as long as the webservers are
configured the same. They should be set to proxy to the same weblogic
instances.
Regards,
Eric
"Julian Herzel" <[email protected]> wrote in message
news:3e62a1b1$[email protected]..
>
Hi,
I'm trying to understand requirements for load-balancing client requeststo a
group of web servers on which we will have the NSAPI plug-in installedunder iPlanet.
We will have in-memory replication configured in a cluster of weblogic 5.1servers
behind the web servers.
Do we need to ensure HTTP stickiness from browser to the web servers orcan client
requests be sent to any web server containing the plug-in during asession?
>
Thanks in advance,
Julian

Problem in connecting to LDAP DS with iPlanet 4.1 Web server

Similar Messages

Maybe you are looking for