Problems registering an existing Directory Server. Only given sudo access

Hellos.
I can install and start/stop my 11g Directory from command line with /opt/sfw/bin/sudo dsadm or dsconf commands.
The directory uses port 389 so I need to have it running as "root" I ran the dsadm command with sudo.
My problem is that when I use the https://localhost:8181/dscc7 web page to register the Directory I eventually get prompted for a Solaris account/password.
I don't know (and I hope I never do know) the password to root.
How do I proceed?
The dialog did say that I can have a Solaris account which can administer this Directory instance but how is it done when I use port 389 ???
HELP!!!

If you're running on Solaris 10, then the most obvious things is to add the relative permission to the user that will run the Directory Server, for example:
# usermod -K defaultpriv=basic,net_privaddr <USER>
HTH,
marco

Similar Messages

  • Problem register Oracle Virtual Directory to WebLogic - urgent ... pls help

    Hi,
    I'm a new to Oracle product and would like to install and run Oracle Virtual Directory for the following purpose:
    Using LDAP client that connects to OVD and to issue ldapsearch command line based on the attrbiutes and filters of each one of the two Directories behind the OVD..
    |-- Tivoli LDAP directory
    LDAP client -> OVD ---|
    |-- MS AD
    I have downloaded the identity management package 11g and install only the OVD on Windows 2003 standard machine.
    I then realized that I have to install the WebLogic package to have WEB UI to the OVD admin.
    So I downloaded the WebLogic 10.3.1.0 package and install it.
    I followed the installation instructions of
    'Installing and Configuring Only Oracle Virtual Directory Without a WebLogic Administration Domain' at http://download.oracle.com/docs/cd/E12839_01/install.1111/e12002/ovd.htm#CIHFFAFH
    and complete the installation.
    Notice that the OVD and the WeblOgic SW are installed on the same Windows machine.
    After that I had to register Oracle Virtual Directory with the WebLogic Administration Server.
    Running the command-line I got the following error:
    Deploying NonJ2EEManagement Application...Done
    Command failed: Exception while registering the instance
    Details are logged in C:\....\provision.log
    opmnctl registerintance: failed
    The provision.log file has the following exception call stack:
    Aug 18, 2009 4:08:05 PM oracle.as.config.provisioner.InstallerCmdLine logInitialCommand
    INFO: Start of command: [registerinstance, -adminHost, 127.0.0.1, -adminPort, 7001, -adminUsername, weblogic, -oracleHome, C:\oracle\product\11.1.1\OracleIDM_1, -oracleInstance, C:\as_admin\asinst_1]
    Aug 18, 2009 4:08:14 PM oracle.as.config.provisioner.InstallerCmdLine handleRunFailure
    SEVERE: Command failed:
    oracle.as.config.ProvisionException: Exception while registering the instance
         at oracle.as.config.impl.OracleASInstanceImpl.register(OracleASInstanceImpl.java:239)
         at oracle.as.config.provisioner.commands.RegisterInstanceCommand.execute(RegisterInstanceCommand.java:11)
         at oracle.as.config.provisioner.InstallerCmdLine.run(InstallerCmdLine.java:86)
         at oracle.as.config.provisioner.InstallerCmdLine.main(InstallerCmdLine.java:44)
    Caused by: oracle.as.config.ProvisionException: Unable to validate NonJ2EEManagement Application deployment on admin server.
         at oracle.as.config.impl.RuntimeServiceConnection.validateNonj2eeApplication(RuntimeServiceConnection.java:595)
         at oracle.as.config.impl.OracleASInstanceImpl.register(OracleASInstanceImpl.java:219)
         ... 3 more
    Caused by: oracle.as.config.ProvisionException: The AdminServer is not enabled for NonJ2ee applications.
         at oracle.as.config.impl.RuntimeServiceConnection.isValidJrfInstall(RuntimeServiceConnection.java:547)
         at oracle.as.config.impl.RuntimeServiceConnection.deployNonj2eeApplication(RuntimeServiceConnection.java:201)
         at oracle.as.config.impl.RuntimeServiceConnection.validateNonj2eeApplication(RuntimeServiceConnection.java:587)
         ... 4 more
    Any thoughts ?

    Hi,
    I am also facing the same problem. I have oracle internet directory 11.1.1 installed without domain. I then installed weblogic 32bit exe on same windows server.
    while registering getting the same error. I think it is because of bit compatibility. OID is 64bit and weblogic is 32bit. Not sure.
    thanks

  • JES connected to existing directory server

    Dear all,
    We have a mail system which uses sun ldap server
    but other components, like MTA, are not from sun.
    Recently we want to transform this system to JES,
    but we have such a problem.
    We dont want to change the current ldap server
    because we have hundreds of millions of users
    stored in it. If we install the JES, how can we let
    the JES recognize the current ldap schema? Is
    there any configurations which enables JES to
    recognize the existing directory schema?
    Thanks for any suggestions you give.
    alex

    Ales, JES does require several object classes and attributes. It's pretty flexible about where in the DIT those lie, but unless you can add what it's looking for, you're not likely to be successful.
    There's a tool, provided with JES, "comms_dssetup.pl" that prepares a Directory Server for use with JES.

  • Install problems - Java Enterprise System Directory Server on AS3.0

    I'm trying to get the new 5.2p3 version of the DS installed, using the Java Enterprise System installer, but am having some problems. I've attempted to install this one two separate systems, both running RHEL AS3.0 Update 4 - one worked great, the other not so much.
    On the system that failed, the install reported success, but it failed to create the appropriate directories for the instance (slapd-<instance>) or the scripts for the admin server (start-admin, stop-admin). It's like it's not actually creating the instance properly on this system (even though it works properly on the other).
    Has anyone run into this, or have any ideas how to get this to install properly? I'm fairly new to this software, but this is driving me insane - two similar systems, same OS, very different results...
    Any help would be most appreciated...

    I had a similar problem with SuSE. You might want to make sure that no JRE is installed prior to your 10g Forms and Reports Server installation. I got rid of the OS installed JRE, and the 10g installation went fine.

  • Replication problem with iPlanet directory server 5.1 SP2 HF1

    If I make a apply a change to either of consumer servers for an entry that belongs to the large database, that change does get applied to the consumer targated but it can not refer the change to teh master. Neither the master, nor the other consumers get updated consequently. I did not have this problem with directory server 5.1 SP1. I only see this problem after I apply directory server 5.1 SP2 HF1.
    From the error log file, I see the following message:
    NSMMReplicationPlugin - repl_set_mtn_referrals: could not set referrals for replica

    I have a suggestion - try another means for administering your directory - use the console only for maintenance and tuning purposes. There are several products out there that are much better for day to day operations ...
    Otherwise - I think with 5.1 the view is based on the rdn of the entries - and I am not sure it is customizable. Additionally I know 5.2 solved your second issue - maybe the latest SP of 5.1 has solved it as well - though I don't really know ...
    -Chris Larivee

  • Problems while installing Sun ONE Directory Server.

    Hi all,
    I'm a newbie to LDAP amd my problem is -
    When I started Installing SunONE DS on machine first time, at the end of the installation, it thrown an error message.
    "The program cant start because nss3.dll is missing from your computer. Try reinstalling the program to fix this problem."
    Later, I copied nss3.dll file to "C:\Windows\System32" and then started the installation then it thrown error again as follows -
    "Configuration of the Directory Server failed.
    Error Directory Server configuration failure
    Checking connection to the Configuration Directory Server... failed.
    The Administration Server cannot be configured.
    Error Administration Server configuration failure
    Error Configuration of the server(s) failed.
    Click Next to continue. "
    What is the reason behind this?

    Bingo, It worked. Yup, I'm using SODS 5.2, I have copied all .dll files from nsbasesystem.zip to "C:\Windows\System32".
    but now the problem is -
    Sun One Directory server service is running
    but
    Sun ONE Administration server process is not running
    I have tried to start it manually but it didn't worked. It initiates the starting of process and then suddenly shows error message that
    "The Sun ONE Administration server 5.2 service on local Computer started and then stopped. Some services stop automatically if they are not in use by other services or programs."

  • Directory Server (partially installed) on ips60

    Hi I have followed the instruction "Configuring an Existing Remote Sun ONE Directory Server for Use With Sun ONE Portal Server" from "Sun ONE Portal Server Release Notes � March 2003" to install an exteral ids.
    I have done the patch by copying the cos-plugin.so to the appropriate directory from INSTALL_HOME/portal/ds_patch/113177-01/SUNWamds/root/var/opt/SU
    NWps/tmp/113177-01/.
    After restaring the directory server, I run the ./pssetup during the installation a message appearing as:
    Detected components:
    Directory Server (partially installed)
    Problems may result if partially installed components are used!
    Remove options:
    1) Remove Directory Server only
    2) Continue with install
    3) Exit
    Choice? [3]
    Is it supposed to show like this? And we ignore the problem and continue with Choice No.2?
    I am currently testing Portal to sit on iAS7 and also installed an external ids51p1. All on the same machine.
    Please advice

    Roger,
    I have confirmed that they have been combined into one package.
    The question now is how can I trick Directory Server 5.2 into thinking they have been installed?
    Thanks!
    Joshua Preston.
    Have you checked the Solaris 10 companion CDs? I
    looked at my JES2005Q1 distro and you're right, those
    packages are there for Sol 8 and 9, but not for 10.
    I checked a couple of our Sol10 machines and neither
    r had them.
    If they're not on the companion CDs, I'd open a case
    with tech support. This is a pretty serious
    oversight.
    HTH,
    Roger S.

  • Change Directory server for Portal Server 6.2

    Hi there,
    I have the following problem with Portal Server 6.2 configuration which hopefully someone here will be able to help me with.
    Basically our current setup is the Sun Portal Server 6.2, ID server 6.1 and Directory server all sitting on one (Solaris 9) box. We now wish to separate the Portal / ID server components and the Directory Server component to separate boxes. In portal server 6.0 i think there was a pssetup tool which allowed configuration of a directory server which populated it with the necessary data for portal and ID server. The directory server we will be installing to will not necessarily be a clean install, i.e. it may already be populated with data.
    Is there some way therefore to re-configure the existing directory server to allow us to point our portal / ID server at it?
    Thanks in advance for any help
    Laurence.

    This can be done. You need to import the portal/identity server's schema into your new directory server and then export your existing directory server's content and import it into the new one.

  • Upgrading  iplanet 4.1 directory server to 5.0

    Dear all
    Problem goes like this:
    We have netscape messaging server 4.1 ,directory server 4.1 running on NT box
    we want to upgrade our mail server to 5.1 and directory server to 5.0 .
    how can i get a pack of mail server 5.1 with directory server 5.0.
    we are thinking to shift the system to Solaris also.
    i tried first loading directory server 5.1 on solaris and then loading messaging server on the same system but using the existing directory server option . then migrating the users from old directory server to 5.1 .
    when we are loading the 5.1 on solaris it's straight forward and it's getting loaded but when installing messaging server on the same system we got a problem saying that serious problem occured while installing admin server ....
    and coming out.

    Hi Phil,
    To ensure its not permissions I'd grant the EUL Owner
    the "Select Any Table" database priv and then try
    again.
    If it still fails I would then perform a database
    trace of the session to get more details.
    Finally, if that fails I would create a new 3.1 EUL
    and export/import all of your business areas into
    that EUL and perform the upgrade to 4.
    Thanks,
    JeffHi Jeff,
    I'll try your suggestions.
    I also did a Business Area refresh which fixed a few definitions that no longer existed but when I ran the upgrade again I got the same error.
    Thanks.
    Phil.

  • Are there any known issues concerning using DIGEST-MD5 SASL authentication with iPlanet Directory Server 5.0 on Windows NT 4.0?

    I am developing support for the DIGEST-MD5 sasl mechnism on a c-ldap client. I am using the evaluation version of the iPlanet Directory Server 5.0 which lists DIGEST-MD5 as a supported SASL mechanism. The server is running on NT 4.0 After installing the Directory Server with the test database, a changed the passwordStorageScheme from the default of SSHA to clear text. I then added my test user. When I run my test I always get back a resultCode of 49 (invalidCredentials). The digest-challenge I receive from the server and my digest-response are shown below. I have satisfied myself that the calculation of the response directive in the digest response is correct. Does anyone see any problems in the digest response or have any other suggestions? Is there a known problem with the iPlanet Directory Server 5.0?
    digest-challenge:
    realm="BGB2.ndp.provo.novell.com",nonce="Ed8UPLXsWaC6CN",qop="auth",algorithm=md5-sess,charset=utf-8
    digest-response:
    username="uid=bgbrown,ou=people,dc=siroe,dc=com",realm="BGB2.ndp.provo.novell.com",cnonce="A9IuPJKr30RiwL",nc=00000001,qop=auth,digest-uri="ldap/BGB2.ndp.provo.novell.com",response=97061205298e5ebaf206c8ac3598fdce,charset=utf-8,nonce="Ed8UPLXsWaC6CN"

    Found the answer. When the username is an LDAP DN it needs to be proceeded by "dn:".
    example: username="dn:uid=bgbrown,ou=people,dc=siroe,dc=com"
    The server also accepts a simple uid value.
    example: username="bgbrown"

  • The interface close! Sun One Directory Server 5.2 sp6

    Hello Everybody!
    We have a really weird problem with Sun One Directory Server 5.2 sp6 on Windows Server 2003 Sp1 we dont know why, or how, but sometimes after a while working on the directory server console the interface suddenly closes! Does anybody know how to solve this problem?

    Thanks,
    Actually the file I need should be readable - I need to parse it later on. But I think I just found the answer in the development kit. The utility is called dbscan and it works directly on the database files.
    Thanks again anyway,
    Ayelet

  • Replace directory server by another stand alone instance on a diffrenet box

    I have JES4 componenets all installed on a sinlge box. I'd like to replace the existing directory server(5.2 sp4) with another directory server instance on a different box. After replacing, I would need to bringdown the existing directory server. What steps do I need to follow for this? Are there any tools to support this kind of replacement strategy? Any poniters in this regard are highly appreciated.
    Thanks in Advance,
    Lakshmi

    I have some questions! I think, there are some attributes for the LDAP instance name and port in some of the services such as:
    iPlanetAMAuthCertService
    iPlanetAMAuthLDAPService
    iPlanetAMAuthMembershipService
    iPlanetAMPolicyConfigService...etc.
    Also these attributes (LDAPinstance name and port) are present in AMConfig.properties,PSConfig.properties and server.xml.
    Since I need to bringdown the existing LDAP server, do I need to manually update each of these attributes in the newly created LDAP isnatnce and the above mentioned files?
    Are there any other properties files or xmls that I need to modify for this?
    Thanks,
    --lakshmi                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       

  • Directory Server 6.2 upgrade to 6.3: import LDIF problem

    Hi all,
    I have tried upgrading my Directory Server 6.2 to version 6.3 because of the database integrity issues as stated in:
    http://blogs.sun.com/dsee/entry/directory_server_6_2_database
    I have followed the steps defined in this article:
    1. Shut down each directory server instance, as described in Starting, Stopping, and Restarting a Directory Server Instance.
    2. Perform an LDIF export of the database, as described in Backing Up to LDIF.
    3. Install the hotfix for bug 6642430 on Directory Server 6.2, or upgrade your Directory Server 6.2 instance to Directory Server 6.3 once Directory Server 6.3 is available for download (early April). You will need to login to Sunsolve in order to see this bug description.
    But when importing the LDIF export, I got the following error:
    [17/Dec/2008:14:44:08 +0100] - import ec: WARNING: Skipping entry "sunPortalAdminPortalDomainPortalServerInstanceMonitoringID=Monitoring,sunPortalAdminPortalDomainPortalServerInstanceID=sol10portal-80,sunPortalAdminPortalDomainPortalID=portal1,sunPortalAdminPortalDomainID=defaultDomain,o=example" whichIt's the only information I get about why the entry was skipped (I did not forget to copy the part after 'which', there was no information there :-))
    This resulted in a missing Portal instance configuration and thus I got a 'configuration error' when surfing through the gateway to the portal.
    I have also tried: manually importing that entry, which resulted in a 'Object does not exist' error. I have tried copying the whole tree from another backup with identical setup, which wasn't working either.
    Did anyone experience the same problems before? Did I do something wrong or is there a workaround for this?
    Second question: What is the exact reason why a export and import is necessary? Or is it only necessary if the database is already corrupt? Is there a way to check that?
    Thanks alot!
    Sten

    The entry was not imported most likely because it's parent isn't in the database yet. Are entries above this in another backend ? If so try importing that backend first. Also, that dn is so long, that it exhausted the buffer which is used to write messages in the access log. This is why, there's nothing after "which".
    What is the exact reason why a export and import is necessary? Or is it only necessary if
    the database is already corrupt? Is there a way to check that?The database corruption could be silent. So a binary backup/restore when going from 6.2 to 6.3 is not recommended and the LDIF route must be used.

  • SUN ONE Directory Server installation Problem on Win XP

    Can some one look at the installation error on WIndows XP
    ERROR: Ldap authentication failed for url ldap://santoshlaptop.cook.com:51303/o=NetscapeRoot user id admin (151:Unknown error.)
    Fatal Slapd Did not add Directory Server information to Configuration Server.
    Configuration of the Directory Server failed.
    Error Directory Server configuration failure
    Checking connection to the Configuration Directory Server... failed.
    The Admininistration Server cannot be configured.
    Error Administration Server configuration failure
    Error Configuration of the server(s) failed
    Thanks a lot
    Santosh

    HI everyone,
    I tried installing directory server 5.2 p4 on WIN XP Professional machine and got the following error:
    [slapd-Teja]: starting up server ...
    [slapd-Teja]: [22/Sep/2006:13:25:52 -0400] - Sun Java(TM) System Directory Server/5.2_Patch_4 B2005.230.0301 (32-bit) starting up
    [slapd-Teja]: [22/Sep/2006:13:25:54 -0400] - Listening on all interfaces port 30145 for LDAP requests
    [slapd-Teja]: [22/Sep/2006:13:25:54 -0400] - slapd started.
    Your new directory server has been started.
    Created new Directory Server
    Start Slapd Starting Slapd server configuration.
    ERROR: Ldap authentication failed for url ldap://ldapteja.hcs.com:30145/o=NetscapeRoot user id admin (151:Unknown error.)
    Fatal Slapd Did not add Directory Server information to Configuration Server.
    Configuration of the Directory Server failed.
    Error Directory Server configuration failure
    Checking connection to the Configuration Directory Server... done.
    Registering Administration Server with Configuration Directory Server... done.
    Loading Administration Server tasks... done.
    Loading global Administration Server configuration... done.
    Generating configuration files ... done.
    Writing Administration Server keys to the Windows registry... done.
    Configuration of the Administration Server succeeded.
    Administration server started properly.
    Error Configuration of the server(s) failed.
    Click Next to continue.
    In fact I did install 5.2 before on my machine but I think it was 5.2 p2. I then installed 5.1 on the same machine.. as the machine was running slow I uninstalled both 5.1 and 5.2 as well.. but from then on I cannot install 5.2 on my lasptop .. can please suggest me some thing that can fix this problem..
    I had this in my host file
    192.168.1.107 Teja.hcs.com..
    Any help is reatly appreciated ..

  • Problem in Publishing the certificate to directory server

    I am having problem regarding the publishing the certificate.I am using iPlanet CMS 4.7 and iPlanet directory server 5.1
    In the CMS >certificate manager > publishing module > mapper
    It provides(manuals) two options to enable the publishing to directory server, i.e
    1)create entry automatically(default plug -in)
    2)Manual entry in directory and mapper to map it.
    I tried both way.When automatically create option is selected it fires an error:
    Failed to create the CA entry.There may be entries in the directory hierachy which do not exist.Please create them manually.
    I am not able to figure out the problem,even if I create certificate hierachy in the directory server it gives the same error.Can anyone figure out the problem so i can publish certificate.Pleae mail me the solution if anybody knows.Thank you

    Hi,
    1. Please open the original project in Captivate 3. i.e. the .cp file in Captivate 3
    2. Go to menu "Audio > Audio Settings"
    3. Change the bitrate to 96kbps or 64kbps
    4. Change the Encoding ferwquency to 44Khz
    5. Save and close the project
    6. Now open the same project in Captivate 5
    7. publish the project
    Audio should play correctly now..
    Hope this helps.
    Regards,
    mukul

Maybe you are looking for