Problems implementing AUTH TLS and AUTH SSL in VSFTPD

I have followed the common recommendations to require ssl on login and ssl on data, I have set made a self-signed certificate and key in a single file and set the pointer. When FireFTP client set up for TLSv1 tries to connect the following is the result (debug info in client):
DEBUG: ({account:" FireFTP Profile Name ", host:"6#.5#.##. ### ", port:"21", login:"bbop", password:"", anonymous:false, security:"authtls", pasvmode:true, ipmode:false, treesync:false, localdir:"", remotedir:"", webhost:"", prefix:"", downloadcasemode:0, uploadcasemode:0, encoding:"UTF-8", notes:"", timezone:0, folder:"", privatekey:""})
DEBUG: gConcurrent:2, gMaxCon:10, gRefreshMode:true, gTempPasvMode:true, gLoadUrl:false, fileMode:2, hiddenMode:true, keepAliveMode:true, networkTimeout:30, proxyHost:, proxyPort:0, proxyType:, activePortMode:false, activeLow:1, activeHigh:65535, reconnectMode:true, sessionsMode:true, timestampsMode:false, useCompression:true, integrityMode:true, userAgent:Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.9) Gecko/20100315 Firefox/3.5.9 (.NET CLR 3.5.30729)
*220 This FTP Site provided by the State University System Board of Governors, Information Resource Management. Information available for download and uploaded by authorized users is subject to all state and federal privacy regulations and use of this site implies user understanding and acceptance of all responsibilities therein.*
AUTH TLS
*234 Proceed with negotiation.*
PBSZ 0
*200 PBSZ set to 0.*
USER bbop
*331 Please specify the password.*
PASS (password not shown)
*230 Login successful.*
FEAT
*211-Features:
AUTH SSL
AUTH TLS
EPRT
EPSV
MDTM
PASV
PBSZ
PROT
REST STREAM
SIZE
TVFS
211 End*
PWD
*257 "/"*
TYPE A
*200 Switching to ASCII mode.*
PROT P
*200 PROT now Private.*
PASV
*227 Entering Passive Mode (6#,5#,##,###,216,96)*
LIST -al
<<<20 seconds later.......>>>
QUIT
The pam.vsftpd looks as follows:
#%PAM-1.0
auth required pam_listfile.so item=user sense=deny file=/etc/vsftpd.ftpusers onerr=succeed
auth required pam_stack.so service=system-auth
auth required pam_shells.so
account required pam_stack.so service=system-auth
session required pam_stack.so service=system-auth
and the vsftpd.conf has the following associated with ssl and chroot jailing:
chroot_local_user=YES
pam_service_name=vsftpd
userlist_enable=YES
listen=YES
tcp_wrappers=YES
ssl_enable=YES
allow_anon_ssl=NO
force_local_data_ssl=YES
force_local_logins_ssl=YES
ssl_tlsv1=YES
ssl_sslv2=NO
ssl_sslv3=NO
rsa_cert_file=/etc/vsftpd/vsftpd.pem
pasv_address=6#.5#.##.###
I must be missing something, but I cannot figure out what! I need to have this site up for users in 14 hours!!!!!

The problem was not in the vsftpd settings really. It was a network security (firewall) issue.
I defined pasv_min_port=#### and pasv_max_port=#### in vsftpd.conf. I had my network administrator open the ports in this range for TCP for this server.
Clients connecting pasv/tlsv1 now have no issues.

Similar Messages

Problem with HTTPS/TLS and ASA

There is a site that we are trying to connect to that appears to only accept TLSv1. When we try to connect from behind the ASA, it looks like TLS is not being permitted. Based on a packet capture, it looks like the client is only trying SSL, which is then denied at the server because it's disabled.
When I try from outside the firewall, it works fine.
What on the ASA could prevent a web client from trying to negotiate TLS?

Conifguration please.
This is path through traffic right?
Please give details of the source network and destination network.

EAP-TLS and MS AD auth problem

Hi,
I have a problem with an ACS to authenticate users with certificate on MS AD.
Working things:
PEAP authentication with the MS AD;
EAP-TLS authentication with the local DB.
Not working things:
EAP-TLS authentication with MS AD.
Because I'm able to auth users with PEAP on MS AD, I guess my config on MS AD is correct.
Because I'm able to auth users with certif in EAP-TLS, I guess my certif config is correct.
So, why it's not working with the combination EAP-TLS and MS AD.
I receive the error 'External DB Account Restriction'
Thanks for your help.

This issue is generally seens when there are multiple domains. Try out this step. Choose Network Connections from the control panel. Right-click the local area connection.Choose Properties. Double-click the TCP/IP option. Choose Advanced at the bottom. Click on DNS at the top. Choose Append these DNS suffixes. Add the FQDN for each domain that ACS authenticates against in the field.

Auth SSL FTP

is there any free package that can handle auth ssl ftp connection and ftp to ftp transfers? thanks in advance

Hi everyone,
You can use the URLConnection class but if is password protected then you need to use the Authenticator class.
You can use this method for ftp but not many people use ftps as much as they use https and thus its not currently supported.
Maybe you can submit a Request For Enhancement(RFE) so maybe we can all get support for ftps as well
Richard West

Problem with Java keystore and certificates (unable to find valid cert path

Our program is made so that when a certificate is not signed by a trusted Certification Authority, it will ask the user if he/her wishes to trust the certificate or not. If they decide to trust the certificate, it will accept the self signed certificate and import it into the keystore and then use that certificate to log the user in. This works fine. It will import the certificate into the keystore and use the specified ip address to establish a connection with the LDAP server (Active Directory in our case) and authenticate properly. However, the problem arises when we then try and connect to a different ip address (without restarting tomcat, if we restart tomcat, it works fine...). It imports the certificate into the keystore fine, but always gives the exception
"Root exception is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target"
and does not authenticate with our LDAP server (which is Active Directory). The problem seems to be that it is no longer looking at the System.setProperty("javax.net.ssl.trustStore", myTrustStore);
I have tried multiple times to just reset this property and try and "force" it to read from my specified trust file when this error happens. I have also imported the certificates directly into the <java_home>/jre/lib/security/cacerts and <java_home>/jre/lib/security/jssecacerts directories as the java documentation says that it will look at those directories first to see if it can find a trusted certificate. However, this does not work either. The only way that I can get this to work is by restarting tomcat all together.
If both of the certificates are already in the keystore before tomcat is started up, everything will work perfect. Again, the only problem is after first connecting to an IP address using TLS and importing the certificate, and then trying to connect to another IP address with a different certificate and import it into the keystore.
One of the interesting features of this is that after the second IP address has failed, I can change the IP address back to the first one that authenticated successfully and authenticate successfully again (ie
I use ip 1.1.1.1, import self signed certificate, authenticates successfully
login with ip 2.2.2.2 import self signed certificate, FAILS
login again with 1.1.1.1 (doesn't import certificate because it is already in keystore) successfully authenticates
Also, I am using java 1.5.0_03.
Any help is greatly appreciated as I've been trying to figure this out for over a week now.
Thanks

Please don't post in threads that are long dead and don't hijack other threads. When you have a question, start your own topic. Feel free to provide a link to an old post that may be relevant to your problem.
I'm locking this thread now.

Problem with RSA/AES and the wrapped Key

Hallo!
For a server-client communications, I would like to use a hybrid encryption.
For this I create an object of a serializable class that contains several properties, including the data that are to be transferred from A to B (Object, encrypted by AES), and the AES key, but wrapped by RSA (byte []).
My basic problem is, that if I send the wrapped key, I get at the destination another byte array and thus the key can not be decoded:
java.security.InvalidKeyException: Invalid AES key length: 256 bytes
When I look at the string representation of the byte array before sending and immediate after receiving, the byte arrays are diffrent. Why?
Extract from the encrypt method:
TransportObject obj = new TransportObject();
    KeyGenerator keygen = KeyGenerator.getInstance("AES");
    SecureRandom random = new SecureRandom();
    keygen.init(random);
    Key key = keygen.generateKey();
    Cipher cipher = Cipher.getInstance("RSA/ECB/NoPadding");
    cipher.init(Cipher.WRAP_MODE, publicKey);
    byte[] wrappedKey = cipher.wrap(key);
// Here I put the byte array in the object to be transmitted
    obj.setKey(wrappedKey);Extract from the decrypt method:
/ / Here I read the byte array from the received object
byte[] wrappedKey = obj.getKey();
Cipher cipher = Cipher.getInstance("RSA/ECB/NoPadding");
cipher.init(Cipher.UNWRAP_MODE, privateKey);
Key key = cipher.unwrap(wrappedKey, "AES", Cipher.SECRET_KEY);Here is the class that is serialized:
import java.io.Serializable;
public class TransportObject implements Serializable {
    private static final long serialVersionUID = 5044061539587999682L;
    private byte[] key;
    private String type;
    private byte[] data;
    public static final int STRING = 1;
    public static final int INT = 2;
    public static final int CHAR = 3;
    public TransportObject() {}
    public TransportObject(byte[] key, String type, byte[] data) {
        this.key = key;
        this.type = type;
        this.data = data;
    public byte[] getKey() {
        return key;
    public void setKey(byte[] key) {
        this.key = key;
}Sending is done via:
TransportObject obj = rsa.encrypt(objectToSend, keys.getPublicKey());
ObjectOutputStream os =
    new ObjectOutputStream(socket.getOutputStream());
os.writeObject(obj);
os.flush();Receiving via
ois = new ObjectInputStream(
    new BufferedInputStream(socket.getInputStream()));
TransportObject obj = (TransportObject) ois.readObject();
Object receivedObject = rsa.decrypt(obj, keys.getPrivateKey());Somehow, I hang down here.
Do I overlook something? Do I have an error in reasoning?
Thanks for any help!
Best regards
Sebastian Gohres
Edited by: Spencer82 on Aug 7, 2010 9:06 AM
Edited by: Spencer82 on Aug 7, 2010 9:08 AM

Do I overlook something? Do I have an error in reasoning?I think at least 2.
1. Don't do this. The general problem has been solved. The solution is called TLS, and Java provides a API called the JSSE for you to use.
2.If you insist on rolling your own, don't specify NoPadding. Use PKCS1Padding. If you are going to use NoPadding, then you must provide your own padding scheme, which you have not.

IPhone, Activesync, and OWA SSL Redirection

I've been banging my head against "Push Mail" since the 2.0 software was released last week. I tried all the answers here, I had Exchange 2003 SP2, my virtual directory was properly configured, OMA working fine, certificate installed on the iPhone, all to no avail.
I finally figured out the problem with my setup, and despite normally being to lazy to post, I figured I would in case anybody else was having the same problem.
If your OWA is configured like mine was, I had 2 sites configured on our mail server using host headers; one for SSL only, and one to redirect regular http requests to the SSL site. The iPhone did not work with this setup.
To get it going, I deleted the secondary "HTTP only" site, and re-configured SSL redirection by allowing non SSL requests to the root of the SSL site, with a default.asp page forcing client-side redirection instead:
<% Response.Redirect "https://your.mail.server/exchange" %>
It now works flawlessly.
This was really irritating to track down, especially with the complete lack of errors on either the phone or the server, but I'm glad it's over. If it helps even one other person out there then it was worth posting about.
-Tommy
Message was edited by: JustAGuyNamedTommy

Hi,
Based on my research, you can disable SSL 2.0 and force SSL 3.0 in IIS. For more detailed information, please refer to the link below:
SSL v3 on Windows 2008
How to disable SSL 2.0 and force SSL 3.0 and TLS 1.0 in IIS
In addition, it seems that Nokia E5 use
NetFront Browser v3.5 and NetFront Browser v3.5 supports SSL 2.0 and SSL 3.0. I am not sure of that, you’d better contact your phone vendor for further assistance.
Best regards,
Susie

Problems with ListViews Drag and Drop

I'm surprised that there isn't an Active X control that can do this more
easily? Would
be curious to find out if there is - although we aren't really embracing the
use of
them within Forte because it locks you into the Microsoft arena.
---------------------- Forwarded by Peggy Lynn Adrian/AM/LLY on 02/03/98 01:33
PM ---------------------------
"Stokesbary, Michael" <[email protected]> on 02/03/98 12:19:52 PM
Please respond to "Stokesbary, Michael" <[email protected]>
To: "'[email protected]'" <[email protected]>
cc:
Subject: Problems with ListViews Drag and Drop
I am just curious as to other people's experiences with the ListView
widget when elements in it are set to be draggable. In particular, I am
currently trying to design an interface that looks a lot like Windows
Explorer where a TreeView resides on the left side of the window and a
ListView resides on the right side. Upon double clicking on the
ListView, if the current node that was clicked on was a folder, then the
TreeView expands this folder and the contents are then displayed in the
ListView, otherwise, it was a file and it is brought up in Microsoft
Word. All this works great if I don't have the elements in the ListView
widget set to be draggable. If they are set to be draggable, then I am
finding that the DoubleClick event seems to get registered twice along
with the ObjectDrop event. This is not good because if I double click
and the current node is a folder, then it will expand this folder in the
TreeView, display the contents in the ListView, grab the node that is
now displayed where that node used to be displayed and run the events
for that as well. What this means, is that if this is a file, then Word
is just launched and no big deal. Unfortunately, if this happens to be
another directory, then the previous directory is dropped into this
current directory and a recursive copy gets performed, giving me one
heck of a deep directory tree for that folder.
Has anybody else seen this, or am I the only lucky one to experience.
If need be, I do have this exported in a .pex file if anybody needs to
look at it more closely.
Thanks in advance.
Michael Stokesbary
Software Engineer
GTE Government Systems Corporation
tel: (650) 966-2975
e-mail: [email protected]

here is the required code....
private static class TreeDragGestureListener implements DragGestureListener {
     public void dragGestureRecognized(DragGestureEvent dragGestureEvent) {
     // Can only drag leafs
     JTree tree = (JTree) dragGestureEvent.getComponent();
     TreePath path = tree.getSelectionPath();
     if (path == null) {
          // Nothing selected, nothing to drag
          System.out.println("Nothing selected - beep");
          tree.getToolkit().beep();
     } else {
          DefaultMutableTreeNode selection = (DefaultMutableTreeNode) path
               .getLastPathComponent();
          if (selection.isLeaf()) {
          TransferableTreeNode node = new TransferableTreeNode(
               selection);
          dragGestureEvent.startDrag(DragSource.DefaultCopyDrop,
               node, new MyDragSourceListener());
          } else {
          System.out.println("Not a leaf - beep");
          tree.getToolkit().beep();
}

Problem with Java 5 and Oracle 10g JDBC driver

Hi All,
Currently we upgrade our web application to Java 5 and Oracle 10.2 JDBC driver. And we encountered a bug, when the user entered the information through UI and data didn't store into database (Oracle 9i). The problem is that this bug is not happend so often maybe once a day and this did not happen before we upgraded to Java 5 and Oracle 10.2 JDBC driver. Does anyone encounter the same problem ? Is this Java 5 problem or Oracle JDBC driver problem ?
Thanks,

sounds like a database problem...
Are you using a driver version that's supported for your database engine?
What else did you change? We once ran into a major bug in our application that had for 5 years been masked by performance problems in our hardware and infrastructure.
Once those were resolved the bug showed itself and caused tens of thousands of records to be erroneously inserted into our database every day.
It's certainly NOT a problem with your JVM (if it's a decent one, like the Sun implementation).
So it's either your database, your driver, your network (dropping packets???), or your application.
The upgrade may just have exposed something that was already there.

Problem with the MenuBar and how can i delete a own component out of the storage

Hello,
I opened this thread in the category "Flex Builder 2", but
under this category my questions fit better.
I have a problem with the MenuBar and a question to delete a
component out of storage.
1. We have implemented the MenuBar, which was filled
dynamically with XML data.
Sporadically it will appear following fault, if we "mousover"
the root layer.
RangeError: Error #2006: Der angegebene Index liegt
außerhalb des zulässigen Bereichs.
at flash.display::DisplayObjectContainer/addChildAt()
at mx.managers::SystemManager/
http://www.adobe.com/2006/flex/mx/internal::rawChildren_addChildAt()
at mx.managers::SystemManager/addChild()
at mx.managers::PopUpManager$/addPopUp()
at mx.controls::Menu/show()
at mx.controls::MenuBar/::showMenu()
at mx.controls::MenuBar/::mouseOverHandler()
Here a abrid ged version of our XML to create the MenuBar:
<Menuebar>
<menu label="Artikel">
<menu label="Artikel anlegen" data="new_article" />
<menu label="Artikel bearbeiten" data="edit_article" />
<menu label="Verpackung">
<menu label="Verpackung anlegen" data="new_package" />
<menu label="Verpackung bearbeiten" data="edit_package"
/>
</menu>
<menu label="Materialgruppe">
<menu label="Materialgruppe anlegen"
data="new_materialgroup" />
<menu label="Materialgruppe bearbeiten"
data="edit_materialgroup" />
</menu>
</menu>
</Menuebar>
It is a well-formed XML.
2. Delete a component out of storage
We have some own components (basically forms), which will be
created and shown by an construct e.g.
var myComponent : T_Component = new T_Component ;
this.addChild(myComponent)
Some of our forms will be created in an popup. On every call
of the popup, we lost 5 mb or more, all childs on the windows will
be removed by formname.removeAllChild();
What cann we do, that the garbage collector will dispose this
objects.
Is there a way to show all objects with references (NOT
NULL)?
I have read in the Flex Help, that
this.removeChild(myComponent) not delete the form and/or object out
of the storage.
Rather the object must be destroyed.
It is sufficient to call delete(myComponent) about remove
this object out of the storage as the case may be that the
garbage-collector remove this object at any time?
Or how can I destroy a component correctly. What happens with
the widgets on this component e.g. input fields or datagrids?
Are they also being deleted?
Thanks for your help.
Matze

If you mena the "photo Library" then you cannot delete it.
This is how iphone handles photos. There are not two copies. There a re simply two places from which to access the same photos. ALL photos synced to iphone can be accessed via Photo Library. Those same pics can be accessed via their individual folder.

Implementing EAP-TLS in the enterprise

Hi all,
I'm currently performing a review of our global corporate wireless network with a view to implementing user and device authentication. We currently use PEAP-Ms Chapv2 and i'm considering the move to EAP-TLS, however I understand this has its pitfalls in terms of added administrative overheads, particularly around manging user certs.
Does anyone have any experiencing in rolling EAP-TLS that can provide me with some advice about what to look out for? We have a full PKI and I understand auto enrolment of user certs can be done using group policy and AD but has anyone seen any other issues I should be wary of?
We have a full Cisco autonomous unified wireless network with Cisco ACS servers for our Radius, tied into AD.
Appreciate any comments, advice or even direction to other resources where I can find some valuble info.
cheers.
Rob

Rob,
Since you are already using PEAP, moving to EAP-TLS is not that bad. Again.... you already have a PKI infrastructure and domain computers should have a certificate already. So with GPO, you just make a change to the wireless profile to change from PEAP to EAP-TLS. Peolpe do look at it as more management.... well it sort of is, but if you have staff that is experience in setting up the PKI, GPO, etc, it really isn't that bad. Client device support is what you will need to look at. If you have devices like iPads, non domain computers that need to be on the network, then maybe you will need to add EAP-TLS and keep PEAP for those other devices.

Problem Getting Error Code and Description in Alerts

We are having trouble getting the Error code and Error description in the Alerts and we're having trouble getting a alert for message mapping exceptions. I have read through the BLOGs and the help on SAP. I'm not sure it is something to do with the configuration or SP14. We did not have these problems with SP12 at our other customer XI implementations.
Background -
We have setup an "XI Alert" classification with three Alert categories -"XI_Mapping_Error", "XI_Adapter_Error", "XI_Runtime_Error".
For the "XI_Mapping_Error" alert category, we have setup a rule so that any Integration Engine Application Mapping.* Error code will create an alert. However, when we have a mapping error in XI which we can see in MONI, we do not get an alert. The checkbox for "Suppress Multiple Alerts of this Rule" is not selected. I am not sure why we're not getting the alert.
For the "XI_Adapter_Error" alert category, we have setup a rule so that any Adapter Engine * adapter type will create an alert. The alert gets created - however, some of the container variables do not get poulated in the email. We have defined Container variables pointing to the corresponding ABAP data dictionary elements - i have double checked these definitions.
Here is an alert email - the Error Code (SXMS_ERROR_CODE - SXMSERRTX) and Error Category (SXMS_ERROR_CAT - SXMSERRCAT) are not being extracted:
Alert ID: ##23896##
Error Code =
Error Category =
Message ID = 1506eab0-6125-11da-9ba2-00505685 Time = 14:26:12 Date = 29.11.2005
Sender Party =
Sender Service = BS_CPI
Sender Interface = MI_CPI_INV_RFC_REQ_ABS
Receiver Party =
Receiver Service = BS_CPI
Receiver Interface =
We are not able to figure out why the Alert framework is not working correctly. We are running XI 3.0 SP 14 on Win2K, SQL 2000.
Anyone encounter these problems? Any help would be appreciated.
Regards,
Jay Malla

>> There are some problems with SP 14 and the alert framework.
Very true! Join the team!
>> We applied Note 876546 which triggered certain alerts that were not getting triggered. However, we're not getting the Error code and Error Description in some of the alerts.
Jay, This note is specifically for a situation where the 'where did the error occur' set to No Restriction. I don't think anything else is included in this fix .01 to patch 0.9 of SPS 12 of XI 3.0!!!
My problem is that even the messageID variable is not getting replaced!!! In SP12 everything was perfect. After SP14, the errors are coming almost instantaneously to the inbox, but without any variable replacement.
Best of luck,
Kannan

Problem with custom_logic badi and it_param - ujk_large_string 1024

Hi experts,
I have a Problem triggering a script with custom logic badi.
I try to implement a data and comment copy package for alle dimensions with source and target.
Target is pushed in one string to IT_PARAM table of type UJK_T_SCRIPT_LOGIC_HASHTABLE.
My Problem is now that the UJK_LARGE_STRING with 1024 characters is too small and many of the Dimension are cutted off.
Do you know a solution or a Workaround for this Problem ? Requirement ist only one prompt/selection Screen.
Thanks in advance and best regards
heinrich

Hi Heinrich,
Split one parameter into many parameters.
If you need more help then please share a screen shot of your script logic.
Andy

Problems using LocateRegistry.createRegistry and getRegistry

In my server, I create the registry:
Registry registry = LocateRegistry.createRegistry(1099);This creates a new rmiregistry process at the localhost, so the URL should be
//localhost:1099
Then I call:
registry.rebind("shapes", shapes);The server runs fine. The problem begins with the client (started on the same machine) - the code is as fallows:
Registry registry = LocateRegistry.getRegistry("my.domain.name", port);
shapes = (MyContainer) registry.lookup("shapes");And I get the following exception:
java.rmi.NotBoundException: shapes
Why does this happen?
Also, is there any method to check if a given port is free? When I start my server, I give it a port as an argument, create a registry and if the port is already taken, I get a BoundException, but the registry process is already statred (at least my process manager says so).

Ok, the client runs on the same machine. Now I checked if it works on another computer, and guess what, it doesn't :-(. (I don't use any secutiry yet - neither server nor the client have any security manager set).
Creating the registry and binding the object:
Registry registry = LocateRegistry.createRegistry(1099);
registry.rebind("shapes", shapes);shapes is of type MyContainer, which extends UnicastRemotObject. Its implementation is MyContainerImpl and It has an array inside, and several methods. All of them work nice when run on the same machine. The array containes String objects.
The client has the interface for MyConatiner. The code looks like this:
Registry registry = LocateRegistry.getRegistry("my.domain.name", 1099);
MyContainer shapes = (MyContainer) registry.lookup("shapes");
System.out.println(shapes.printAllShapes());And this doesn't work. I get an exception:
java.rmi.ConnectException: Connection refused to host: 127.0.0.1; nested exception is:
java.net.ConnectException: Connection refused
at sun.rmi.transport.tcp.TCPEndpoint.newSocket(TCPEndpoint.java:574)
at sun.rmi.transport.tcp.TCPChannel.createConnection(TCPChannel.java:185)
at sun.rmi.transport.tcp.TCPChannel.newConnection(TCPChannel.java:171)
at sun.rmi.server.UnicastRef.invoke(UnicastRef.java:94)
at java.rmi.server.RemoteObjectInvocationHandler.invokeRemoteMethod(RemoteObjectInvocationHandler.java:179)
at java.rmi.server.RemoteObjectInvocationHandler.invoke(RemoteObjectInvocationHandler.java:132)
at $Proxy0.getBestJoke(Unknown Source)
at pizda.Main.main(Main.java:12)
Caused by: java.net.ConnectException: Connection refused
at java.net.PlainSocketImpl.socketConnect(Native Method)
at java.net.PlainSocketImpl.doConnect(PlainSocketImpl.java:333)
at java.net.PlainSocketImpl.connectToAddress(PlainSocketImpl.java:195)
at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:182)
at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:366)
at java.net.Socket.connect(Socket.java:507)
at java.net.Socket.connect(Socket.java:457)
at java.net.Socket.<init>(Socket.java:365)
at java.net.Socket.<init>(Socket.java:178)
at sun.rmi.transport.proxy.RMIDirectSocketFactory.createSocket(RMIDirectSocketFactory.java:22)
at sun.rmi.transport.proxy.RMIMasterSocketFactory.createSocket(RMIMasterSocketFactory.java:128)
at sun.rmi.transport.tcp.TCPEndpoint.newSocket(TCPEndpoint.java:569)
... 7 more
What is wierd is that I get the exception not in the lookup call (it seems that this works, it returns a reference) but in the line which calls one of the methods of MyContainer object. When I call registry.list()[0] it return the string "shapes".
All this makes me more and more frystrated, becouse it seems the client can find the remote object, but if it calls it's methods the exception says it can't connect to 127.0.0.1. Why does it try in the first place?
Someone please help me out.

Problems with Messaging Bridge and MQ.

          Hi,
          I'm trying to use the Weblogic messaging bridge to provide a set of local queues
          to my application server from a set of MQ queues, using XA.
          My problem is that when the bridge starts up, it gives the following error:
          <Aug 5, 2002 4:35:14 PM BST> <Info> <MessagingBridge> <Bridge "BRIDGE.STATUS1"
          failed to connect to the source destination and will try again in 20 seconds.
          (javax.resource.spi.ResourceAllocationException: CreateManagedConnection Error:
          ConnectionFactory: failed to get initial context (InitialContextFactory =weblogic.jndi.WLInitialContextFactory,
          url = file:////blah/adminobjects, user name = null, password = null)>
          <Aug 5, 2002 4:35:14 PM BST> <Notice> <WebLogicServer> <ListenThread listening
          on port 8051>
          I think the problem is as follows...
          This bridge should be connecting to a file-server JNDI implementation, and should
          therefore being trying to obtain a com.sun.jndi.fscontext.RefFSContextFactory
          initial context, not a weblogic.jndi.WLInitialContextFactory one. I have set up
          the destination in the weblogic console with a file server context, but this doesn't
          have any effect.
          The file server JNDI implementation definitely works, as I can access the queues
          directly and use them to call MDBs.
          Can anyone help?


          You mentioned that the patch initially worked. What did you do after
          that?
          You can turn on the messaging bridge debug by adding those to
          you script for starting the server:
          -Dweblogic.Debug.DebugMessagingBridgeStartup=true
          -Dweblogic.Debug.DebugMessagingBridgeRuntime=true
          See what you get in the server log.
          You need to post your config.xml and the script as well for further
          help.
          Dongbo
          Christopher Sceats wrote:
          >
          > I'm afraid this is not the problem - I have all of the required things in my PATH
          > and CLASSPATH:
          >
          > CLASSPATH:
          > com.ibm.mq.jar
          > com.ibm.mqbind.jar
          > com.ibm.mqjms.jar
          >
          > PATH:
          > /opt/mqi/bin
          > /opt/mqi/java/lib
          >
          > Dongbo Xiao <[email protected]> wrote:
          > >The possible problem is your PATH and CLASSPATH. You have to have the
          > >
          > >MQSeries stuff in your PATH and CLASSPATH (NOT the AdapterClasspath
          > >attribute of your BridgeDestination) for starting the WebLogic server.
          > >
          > >Those are all documented. Please take a look
          > >at the WebLogic Server online doc
          > >http://edocs.bea.com/wls/docs70/adminguide/msgbridge.html
          > >and
          > >the latest integrating foreign providers white-paper. It is
          > >available on dev2dev, or you can find it here:
          > >http://newsgroups.bea.com/cgi-bin/dnewsweb?cmd=article&group=weblogic.developer.interest.jms&item=9364&utag=
          > >
          > >Dongbo
          > >
          > >
          > >Christopher Sceats wrote:
          > >>
          > >> Thanks Dongbo.
          > >>
          > >> This initally worked and I was able to connect the bridge to the source
          > >destination.
          > >> However, today this no longer works, and I get the following error...
          > >>
          > >> <Aug 6, 2002 12:00:02 PM BST> <Warning> <Connector> << Weblogic Messaging
          > >Bridge
          > >> Adapter (XA) > ResourceAllocationException of javax.resource.ResourceException:
          > >> Failed to start the connection on createManagedConnection.>
          > >>
          > >> Having seen a previous post on this subject, I tried sending a message
          > >to this
          > >> queue with a standalone client, and this works fine. However, when
          > >I use the application
          > >> server it fails to start the connection. Is there any way I can get
          > >further diagnostics?
          > >>
          > >> Dongbo Xiao <[email protected]> wrote:
          > >> >Are you using 6.1SP3? There is a known problem in 6.1SP3 that may
          > >have
          > >> >caused
          > >> >your problem. Contact BEA support to get the Temporary Patch for the
          > >> >problem.
          > >> >The internal Change Request is CR081511 and the patch is
          > >> >CR081511_61sp3.jar.
          > >> >
          > >> >Dongbo
          > >> >
          > >> >
          > >> >Christopher Sceats wrote:
          > >> >>
          > >> >> Hi,
          > >> >>
          > >> >> I'm trying to use the Weblogic messaging bridge to provide a set
          > >of
          > >> >local queues
          > >> >> to my application server from a set of MQ queues, using XA.
          > >> >>
          > >> >> My problem is that when the bridge starts up, it gives the following
          > >> >error:
          > >> >>
          > >> >> <Aug 5, 2002 4:35:14 PM BST> <Info> <MessagingBridge> <Bridge "BRIDGE.STATUS1"
          > >> >> failed to connect to the source destination and will try again in
          > >20
          > >> >seconds.
          > >> >> (javax.resource.spi.ResourceAllocationException: CreateManagedConnection
          > >> >Error:
          > >> >> ConnectionFactory: failed to get initial context (InitialContextFactory
          > >> >=weblogic.jndi.WLInitialContextFactory,
          > >> >> url = file:////blah/adminobjects, user name = null, password = null)>
          > >> >> <Aug 5, 2002 4:35:14 PM BST> <Notice> <WebLogicServer> <ListenThread
          > >> >listening
          > >> >> on port 8051>
          > >> >>
          > >> >> I think the problem is as follows...
          > >> >>
          > >> >> This bridge should be connecting to a file-server JNDI implementation,
          > >> >and should
          > >> >> therefore being trying to obtain a com.sun.jndi.fscontext.RefFSContextFactory
          > >> >> initial context, not a weblogic.jndi.WLInitialContextFactory one.
          > >I
          > >> >have set up
          > >> >> the destination in the weblogic console with a file server context,
          > >> >but this doesn't
          > >> >> have any effect.
          > >> >>
          > >> >> The file server JNDI implementation definitely works, as I can access
          > >> >the queues
          > >> >> directly and use them to call MDBs.
          > >> >>
          > >> >> Can anyone help?

Problems implementing AUTH TLS and AUTH SSL in VSFTPD

Similar Messages

Maybe you are looking for