Secure port error en HttpClusterServlet config

According to the release notes, it's now possible to set up SSL
          communications between WLS (proxy) and WLS (app) instances using the
          HttpClusterServlet. However, when I set the secureProxy to "ON", I
          receive a message telling me that I need to define the secure port.
          What is the syntax for defining the secure port? I assume that it is in
          the "defaultServers" parameter of HttpClusterServlet, but haven't gotten
          it to work yet.
          Thanks
          Monte

Similar Messages

Secure port error on Oracle DSEE 11gR1

Hi,
I just installed Oracle 11gR1, and trying to run dsconf command, it does not let me run with secure port ( 15389). For example i am trying to run the following command, but i get bind error :
/var/Sun/mps/dsee7/bin> dsconf analyze-index-filters -h "example.com" -p "15389" "dc=example,dc=com"
Unable to bind securely on "example.com:15389".
The "analyze-index-filters" operation failed on "example.com:15389".
Please help me.
Thanks, Pamela

Hi,
Could you try again with -P instead of -p ?
Regards,
-Sylvain

Error: Specify secure port in the property Using ports 7001/7002

          Hi,
          I have two node cluster using WL6.1, and Solaris.
          Then, I also setup NSAPI plug in, and specify 2 nodes
          in obj.conf file. But I tried to browse the URL.
          I have "Secure port in property..." error message.
          I check the SSL property in domain->servers->SERVERNAME
          Enabled:checked
          Listen Port: 9002
          Server Key File Name: config/mydomain/demokey.pem
          Server Certified File Name: config/mydomain/democert.pem
          Server Certifiled Chan File Name: config/mydomain/ca.pem
          Is the above correct setup?
          What am I missing?
          Thanks,
          // hiromu


Ok.. That makes more sense.
          So, before we fix the error message, I want to understand your architecture.
          You have NES(Iplanet) proxying requests to 2 managed servers that are
          clustered.
          Your managed servers also have the HttpClusterServlet setup to proxy back to
          those two instances? I think you may be a bit confused.
          The HttpClusterServlet is usually installed on another instance of
          WebLogic(managed server) if you are not using Iplanet, IIS, or Apache as a
          frontend WebServer. When you use the HttpClusterServlet, that WebLogic
          instance will act as a WebServer proxying requests to OTHER backend WebLogic
          Servers.
          In your case, you probably do not need to use the HttpClusterServlet as you
          are using Iplanet to proxy the requests.
          In any case, here is the fix to your problem:
          Refer to:
          http://e-docs.bea.com/wls/docs61///////adminguide/http_proxy_cluster.html
          The documentation says the format of specifying the defaultServers is
          host1:port:secport|host2:port:secport.
          Therefore, you need to add the secure port even though you aren't using it.
          Let's assume your secure port is 9002, then your entry should be:
          <init-param>
          <param-name>defaultServers</param-name>
          <param-value>cyberia:9001:9002|sun-timmy:9001:9002</param-value>
          </init-param>
          Regards,
          Eric
          "hiromu kato" <[email protected]> wrote in message
          news:[email protected]...
          >
          > Eric,
          >
          > The error message is from the managed server log as
          >
          > ####<Oct 2, 2001 9:26:02 PM PDT> <Notice> <WebLogicServer> <cyberia>
          <cluster2>
          > <ListenThread> <system> <> <000201> <ListenThread liste
          > ning on port 9001, ip address 10.10.102.189>
          > ####<Oct 2, 2001 9:26:04 PM PDT> <Notice> <Cluster> <cyberia> <cluster2>
          <main>
          > <system> <> <000102> <Listening for multicast messages
          > (cluster bvcluster2) on port 9001 at address 237.0.0.1>
          > ####<Oct 2, 2001 9:26:04 PM PDT> <Notice> <WebLogicServer> <cyberia>
          <cluster2>
          > <main> <system> <> <000330> <Started WebLogic Managed S
          > erver "cluster2" for domain "mydomain" running in Production Mode>
          > ####<Oct 2, 2001 9:26:16 PM PDT> <Info> <HTTP> <cyberia> <cluster2>
          <ExecuteThread:
          > '11' for queue: 'default'> <> <> <101047> <[WebAppS
          > ervletContext(1524862,bv,/bv)] HttpClusterServlet: init>
          > ####<Oct 2, 2001 9:26:16 PM PDT> <Error> <HTTP> <cyberia> <cluster2>
          <ExecuteThread:
          > '11' for queue: 'default'> <> <> <101048> <Please
          > specify secure port in the properties. Using ports 7001/7002. See release
          notes
          > for more info>
          > ####<Oct 2, 2001 9:26:16 PM PDT> <Error> <HTTP> <cyberia> <cluster2>
          <ExecuteThread:
          > '11' for queue: 'default'> <> <> <101048> <Please
          > specify secure port in the properties. Using ports 7001/7002. See release
          notes
          > for more info>
          > ****************
          >
          > I got the above error when I set web.xml
          > <?xml version="1.0" ?>
          >
          > <!DOCTYPE web-app PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application
          1.2//EN"
          > "http://java.sun.com/j2ee/dtds/web-app_2_2.dtd">
          >
          > <web-app>
          >
          > <servlet>
          > <servlet-name>HttpClusterServlet</servlet-name>
          >
          <servlet-class>weblogic.servlet.internal.HttpClusterServlet</servlet-class>
          > <init-param>
          > <param-name>defaultServers</param-name>
          > <param-value>cyberia:9001|sun-timmy:9001</param-value>
          > </init-param>
          > <init-param>
          > <param-name>DebugConfigInfo</param-name>
          > <param-value>ON</param-value>
          > </init-param>
          > </servlet>
          > <servlet-mapping>
          > <servlet-name>HttpClusterServlet</servlet-name>
          > <url-pattern>/</url-pattern>
          > </servlet-mapping>
          > <servlet-mapping>
          > <servlet-name>HttpClusterServlet</servlet-name>
          > <url-pattern>*.jsp</url-pattern>
          > </servlet-mapping>
          > <servlet-mapping>
          > <servlet-name>HttpClusterServlet</servlet-name>
          > <url-pattern>*.htm</url-pattern>
          > </servlet-mapping>
          > <servlet-mapping>
          > <servlet-name>HttpClusterServlet</servlet-name>
          > <url-pattern>*.html</url-pattern>
          > </servlet-mapping>
          > </web-app>
          >
          > **********************
          > My obj.conf of the NES is
          >
          > Init fn="load-modules" funcs="wl_proxy,wl_init"
          shlib=/mebsuta/b/webserver/https-http-mebuta-hkato-50005/plugins/libproxy.so
          > Init fn="wl_init"
          >
          > Init fn=load-types mime-types=mime.types
          > Init fn="load-modules"
          shlib="/mebsuta/b/webserver/bin/https/lib/libNSServletPlugin.so"
          >
          funcs="NSServletEarlyInit,NSServletLateInit,NSServletNameTrans,NSServletServ
          ice"
          > shlib_flags="(global|now)"
          > Init fn="NSServletEarlyInit" EarlyInit=yes
          > Init fn="NSServletLateInit" LateInit=yes
          >
          >
          > <Object name="weblogic" ppath="*/weblogic/*">
          > Service fn=wl_proxy WebLogicCluster="cyberia:9001,sun-timmy:9001"
          PathTrim="/weblogic"
          > </Object>
          >
          > <Object name="si" ppath=*/servletimages/*">
          > Service fn=wl_proxy WebLogicCluster="cyberia:9001,sun-timmy:9001"
          > </Object>
          >
          >
          > <Object name=default>
          > NameTrans fn="NSServletNameTrans" name="servlet"
          > NameTrans fn="pfx2dir" from="/servlet"
          dir="/mebsuta/a/hkato/docs_50005/servlet"
          > name="ServletByExt"
          > NameTrans fn=pfx2dir from=/ns-icons dir="/mebsuta/b/webserver/ns-icons"
          name="es-internal"
          > NameTrans fn=pfx2dir from=/mc-icons dir="/mebsuta/b/webserver/ns-icons"
          name="es-internal"
          > NameTrans fn="pfx2dir" from="/help"
          dir="/mebsuta/b/webserver/manual/https/ug"
          > name="es-internal"
          > NameTrans fn="pfx2dir" from="/manual"
          dir="/mebsuta/b/webserver/manual/https"
          > name="es-internal"
          > NameTrans fn=document-root root="/mebsuta/a/hkato/docs_50005"
          > Service method="(GET|HEAD|POST|PUT)" type=text/jsp fn=wl_proxy
          WebLogicCluster="cyberia:9001,sun-timmy:9001",
          > PathPrepend=/jspfiles
          > PathCheck fn=unix-uri-clean
          > PathCheck fn="check-acl" acl="default"
          > PathCheck fn=find-pathinfo
          > PathCheck fn=find-index index-names="index.html,home.html"
          > ObjectType fn=type-by-extension
          > ObjectType fn=force-type type=text/plain
          >
          > Service method=(GET|HEAD) type=magnus-internal/imagemap fn=imagemap
          > Service method=(GET|HEAD) type=magnus-internal/directory fn=index-common
          > Service method=(GET|HEAD|POST) type=*~magnus-internal/* fn=send-file
          > #AddLog fn=flex-log name="access"
          > </Object>
          >
          > <Object name=cgi>
          > ObjectType fn=force-type type=magnus-internal/cgi
          > Service fn=send-cgi
          > </Object>
          >
          > <Object name="servlet">
          > ObjectType fn=force-type type=text/html
          > Service fn="NSServletService"
          > </Object>
          >
          > <Object name="jsp092">
          > ObjectType fn="type-by-extension"
          > ObjectType fn="change-type" type="magnus-internal/jsp092"
          if-type="magnus-internal/jsp"
          > Service fn="NSServletService" type="magnus-internal/jsp092"
          > </Object>
          >
          > <Object name="ServletByExt">
          > ObjectType fn=force-type type=magnus-internal/servlet
          > Service type="magnus-internal/servlet" fn="NSServletService"
          > </Object>
          >
          > <Object name="es-internal">
          > PathCheck fn="check-acl" acl="es-internal"
          > </Object>
          >
          >
          > Thank you for the help,
          >
          > // hiromu
          >

Error Disable on port after applying .1X config

Hi Guys,
I'm installing ISE 1.2 on the network and when testing with few machines, some of them reported "errdisable" status on the port after applying the .1X configuration. The config for the port I have is:
switchport access vlan 10
switchport mode access
switchport voice vlan 100
ip access-group Default-ACL in
authentication event fail action next-method
authentication event server alive action reinitialize
authentication host-mode multi-domain
authentication order mab dot1x webauth
authentication priority dot1x mab webauth
authentication port-control auto
authentication periodic
authentication timer reauthenticate server
mab
snmp trap mac-notification change added
snmp trap mac-notification change removed
dot1x pae authenticator
dot1x timeout tx-period 2
spanning-tree portfast
spanning-tree bpduguard enable
When I remove the .1X config on the port it comes up fine. Shutting and un-shutting the port couldn't recover it. I don't have any port security configured.
Any ideas?
Thanks,
Mohammad

Hey Guys,
I have PC and IP phone connected to the port. Before applying .1x:
sh mac address-table int fa0/27
          Mac Address Table
Vlan    Mac Address       Type        Ports
100    580a.2098.3010    DYNAMIC     Fa0/27
108    2c27.d71d.4089    DYNAMIC     Fa0/27
Total Mac Addresses for this criterion: 2
In the switch log, it's complaining about security violation:
*Sep 28 00:41:45.855: %AUTHMGR-5-START: Starting 'mab' for client (580a.2098.3010) on Interface Fa0/27 AuditSessionID 8282822A000070AC3EC3F50E
*Sep 28 00:41:45.897: %MAB-5-SUCCESS: Authentication successful for client (580a.2098.3010) on Interface Fa0/27 AuditSessionID 8282822A000070AC3EC3F50E
*Sep 28 00:41:45.897: %AUTHMGR-7-RESULT: Authentication result 'success' from 'mab' for client (580a.2098.3010) on Interface Fa0/27 AuditSessionID 8282822A000070AC3EC3F50E
*Sep 28 00:41:46.568: %AUTHMGR-5-SUCCESS: Authorization succeeded for client (580a.2098.3010) on Interface Fa0/27 AuditSessionID 8282822A000070AC3EC3F50E
*Sep 28 00:42:44.811: %AUTHMGR-5-START: Starting 'mab' for client (2c27.d71d.4089) on Interface Fa0/27 AuditSessionID 8282822A000070AD3EC4F8CE
*Sep 28 00:42:44.836: %MAB-5-SUCCESS: Authentication successful for client (2c27.d71d.4089) on Interface Fa0/27 AuditSessionID 8282822A000070AD3EC4F8CE
*Sep 28 00:42:44.836: %AUTHMGR-7-RESULT: Authentication result 'success' from 'mab' for client (2c27.d71d.4089) on Interface Fa0/27 AuditSessionID 8282822A000070AD3EC4F8CE
*Sep 28 00:42:44.844: %AUTHMGR-5-SECURITY_VIOLATION: Security violation on the interface FastEthernet0/27, new MAC address (2c27.d71d.4089) is seen.AuditSessionID 8282822A000070AD3EC4F8CE
*Sep 28 00:42:44.844: %PM-4-ERR_DISABLE: security-violation error detected on Fa0/27, putting Fa0/27 in err-disable state
*Sep 28 00:42:45.876: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/27, changed state to down
*Sep 28 00:42:46.874: %LINK-3-UPDOWN: Interface FastEthernet0/27, changed state to down
Thanks,
Mohammad

Security-violation error in 3750

We Have a strange behavior with the computer of a user who connects with his laptop to the network through port replicator or docking station,Where we have a acs.When he goes to another place of the company in another City, Where we have other acs, he connects without port replicator directly to network,It works well. But when the laptop returns does not have
network and the following message of error in switch appears:
May 16 07:51:23: %DOT1X-5-SECURITY_VIOLATION: Security violation on interface FastEthernet1/0/27, New MAC address 00c0.f200.53f0 is seen on the interface in Single Host mode
May 16 07:51:23: %PM-4-ERR_DISABLE: security-violation error detected on Fa1/0/27, putting Fa1/0/27 in err-disable state
May 16 07:51:24: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet1/0/27, changed state to down
May 16 07:51:25: %LINK-3-UPDOWN: Interface FastEthernet1/0/27, changed state to down
I execute the commando "shutdown" and "not shutdown" in the interface of switch, and soon the commando: "dot1x port-control auto" and soon "not dot1x port-control auto". laptop make authentication and begins to work well.
What think you about What this occurring?

Hi,
Is there any port security being set on the switch?
are you able to paste your config file here?
thanks,
rgds,
ken L

proxy Please specify secure port

          All,
          I got following messages said:
          Fri Dec 29 17:09:46 CST 2000:<I> <WebLogicServer> WebLogic Server started
          Fri Dec 29 17:10:14 CST 2000:<E> <proxy> Please specify secure port in the properties. Using default ports 7001/7002 See release notes for more info
          Fri Dec 29 17:10:14 CST 2000:<E> <proxy> Please specify secure port in the properties. Using default ports 7001/7002 See release notes for more info
          We use WL as proxy server to host the web. There have another 2 clustering machines behide it running WL 5.1 w/SP6. weblogic.properties in proxy server configured as following:
          # THE WEBLOGIC PROPERTIES FILE
          weblogic.system.listenPort=80
          weblogic.password.system=wwwadmin
          weblogic.allow.execute.weblogic.servlet=everyone
          weblogic.httpd.register.cluster=\
          weblogic.servlet.internal.HttpClusterServlet
          weblogic.httpd.initArgs.cluster=\
          defaultServers=web1:80|web3:80
          weblogic.httpd.defaultServlet=cluster
          weblogic.security.ssl.enable=true
          weblogic.system.SSLListenPort=7003
          weblogic.httpd.register.authenticated=weblogic.t3.srvr.ClientAuthenticationServlet
          weblogic.security.certificateCacheSize=3
          weblogic.httpd.register.AdminCaptureRootCA=admin.AdminCaptureRootCA
          weblogic.security.clientRootCA=SecureServerCA.pem
          weblogic.security.certificate.server=democert.pem
          weblogic.security.key.server=demokey.pem
          weblogic.security.certificate.authority=ca.pem
          weblogic.httpd.register.Certificate=utils.certificate
          weblogic.allow.execute.weblogic.servlet.Certificate=system
          weblogic.httpd.enable=true
          weblogic.system.nativeIO.enable=true
          weblogic.system.enableConsole=true
          weblogic.system.executeThreadCount=50
          weblogic.system.maxLogFileSize=1024
          weblogic.httpd.enableLogFile=true
          weblogic.httpd.logFileName=access.log
          weblogic.httpd.enableEvents=false
          weblogic.httpd.session.enable=true
          weblogic.httpd.session.cookie.name=WebLogicSession
          weblogic.allow.execute.weblogic.servlet.classes=everyone
          weblogic.httpd.register.*.html=weblogic.servlet.FileServlet
          weblogic.httpd.register.*.jpg=\
          weblogic.servlet.FileServlet
          weblogic.httpd.register.*.gif=\
          weblogic.servlet.FileServlet
          weblogic.httpd.initArgs.*.html=defaultFilename=index.html
          weblogic.httpd.register.proxy=weblogic.t3.srvr.HttpProxyServlet
          weblogic.httpd.initArgs.proxy=redirectURL=http://web1/
          webLOGic.httpd.documentRoot=public_html/
          Your input are very appreciated!
          Brian


          There won't have 2 lines proxy server message again. But now i got following message said:
          <Proxy> IOException after server.proxy()....coneection refused
          java.net.Connection: Connection refused
          What's the minimum setting in weblogic.properties to setup a WL as a proxy server. WL will be 5.1 w/ SP6.
          "Ronan Brady" <[email protected]> wrote:
          >Your properties line
          > weblogic.httpd.initArgs.cluster=defaultServers=web1:80|web3:80
          >should read
          > weblogic.httpd.initArgs.cluster=defaultServers=web1:80:7003|web3:80:7003
          >
          >See extract from release notes below:
          >
          >Additional details on ISSUES 31822:
          >
          >The following diagram illustrates the differences between setting
          >secureProxy="ON" and secureProxy="OFF".
          >This feature is set in the WebLogic properties file.
          >
          >secureProxy=ON
          >
          >BROWSER<------>HTTPS------>PROXY<------>HTTPS----->WEBLOGIC SERVER CLUSTER
          >
          >secureProxy=OFF
          >
          >BROWSER<------>HTTPS------>PROXY<------>HTTP----->WEBLOGIC SERVER CLUSTER
          >By passing the secureProxy parameter as an initial argument (in WebLogic
          >init.Args) in the cluster servlet and setting it to ON, SSL between the
          >proxy and the clusters will be enabled. Below is a demonstration of how to
          >turn on the secure proxy feature:
          >
          >weblogic.httpd.register.cluster=weblogic.servlet.internal.HttpClusterServlet
          >weblogic.httpd.initArgs.cluster=\
          >defaultServers=server1:7001:7002|server2:7001:7002,\
          >secureProxy=ON
          >
          >
          >"Brian Lin" <[email protected]> wrote in message
          >news:[email protected]...
          >>
          >> There still has 2 lines message shown on proxy server:
          >> <proxy> Please specify secure port in the properties. Using default ports
          >7001/7002 See release notes fore more info.
          >>
          >> I can see static html on browser now, but servlet and ejb. Before added
          >weblogic.security.SSLListenport on command line, the console will said
          >undefined this property. But it seems to me not working anyway with message
          >returned on proxy server.
          >>
          >>
          >> "Tao Zhang" <[email protected]> wrote:
          >> >It should be weblogic.security.SSLListenPort not
          >> >weblogic.system.SSLListenPort.
          >> >Brian Lin <[email protected]> wrote in message
          >> >news:[email protected]...
          >> >>
          >> >> But proxy server doesn't work in progress (idle).
          >> >>
          >> >> "Tao Zhang" <[email protected]> wrote:
          >> >> >It means that you have to put the listening port and ssl listen port
          >in
          >> >the
          >> >> >2 clustering machines.
          >> >> >If you don't use ssl, you can ignore this message.
          >> >> >
          >> >> >
          >> >> >Brian Lin <[email protected]> wrote in message
          >> >> >news:[email protected]...
          >> >> >>
          >> >> >> All,
          >> >> >>
          >> >> >> I got following messages said:
          >> >> >> Fri Dec 29 17:09:46 CST 2000:<I> <WebLogicServer> WebLogic Server
          >> >started
          >> >> >> Fri Dec 29 17:10:14 CST 2000:<E> <proxy> Please specify secure port
          >in
          >> >the
          >> >> >properties. Using default ports 7001/7002 See release notes for more
          >info
          >> >> >> Fri Dec 29 17:10:14 CST 2000:<E> <proxy> Please specify secure port
          >in
          >> >the
          >> >> >properties. Using default ports 7001/7002 See release notes for more
          >info
          >> >> >>
          >> >> >> We use WL as proxy server to host the web. There have another 2
          >> >clustering
          >> >> >machines behide it running WL 5.1 w/SP6. weblogic.properties in proxy
          >> >server
          >> >> >configured as following:
          >> >> >> -------------------------------------
          >> >> >> # THE WEBLOGIC PROPERTIES FILE
          >> >> >>
          >> >> >> weblogic.system.listenPort=80
          >> >> >> weblogic.password.system=wwwadmin
          >> >> >> weblogic.allow.execute.weblogic.servlet=everyone
          >> >> >> weblogic.httpd.register.cluster=\
          >> >> >> weblogic.servlet.internal.HttpClusterServlet
          >> >> >> weblogic.httpd.initArgs.cluster=\
          >> >> >> defaultServers=web1:80|web3:80
          >> >> >> weblogic.httpd.defaultServlet=cluster
          >> >> >> weblogic.security.ssl.enable=true
          >> >> >> weblogic.system.SSLListenPort=7003
          >> >> >>
          >> >> >>
          >> >>
          >>
          >>>weblogic.httpd.register.authenticated=weblogic.t3.srvr.ClientAuthenticatio
          >n
          >> >S
          >> >> >ervlet
          >> >> >> weblogic.security.certificateCacheSize=3
          >> >> >> weblogic.httpd.register.AdminCaptureRootCA=admin.AdminCaptureRootCA
          >> >> >> weblogic.security.clientRootCA=SecureServerCA.pem
          >> >> >> weblogic.security.certificate.server=democert.pem
          >> >> >> weblogic.security.key.server=demokey.pem
          >> >> >> weblogic.security.certificate.authority=ca.pem
          >> >> >> weblogic.httpd.register.Certificate=utils.certificate
          >> >> >> weblogic.allow.execute.weblogic.servlet.Certificate=system
          >> >> >>
          >> >> >> weblogic.httpd.enable=true
          >> >> >> weblogic.system.nativeIO.enable=true
          >> >> >> weblogic.system.enableConsole=true
          >> >> >> weblogic.system.executeThreadCount=50
          >> >> >>
          >> >> >> weblogic.system.maxLogFileSize=1024
          >> >> >> weblogic.httpd.enableLogFile=true
          >> >> >> weblogic.httpd.logFileName=access.log
          >> >> >> weblogic.httpd.enableEvents=false
          >> >> >> weblogic.httpd.session.enable=true
          >> >> >> weblogic.httpd.session.cookie.name=WebLogicSession
          >> >> >>
          >> >> >> weblogic.allow.execute.weblogic.servlet.classes=everyone
          >> >> >> weblogic.httpd.register.*.html=weblogic.servlet.FileServlet
          >> >> >> weblogic.httpd.register.*.jpg=\
          >> >> >> weblogic.servlet.FileServlet
          >> >> >> weblogic.httpd.register.*.gif=\
          >> >> >> weblogic.servlet.FileServlet
          >> >> >> weblogic.httpd.initArgs.*.html=defaultFilename=index.html
          >> >> >> weblogic.httpd.register.proxy=weblogic.t3.srvr.HttpProxyServlet
          >> >> >> weblogic.httpd.initArgs.proxy=redirectURL=http://web1/
          >> >> >> webLOGic.httpd.documentRoot=public_html/
          >> >> >> -------------------------------------------------
          >> >> >>
          >> >> >> Your input are very appreciated!
          >> >> >>
          >> >> >> Brian
          >> >> >
          >> >> >
          >> >>
          >> >
          >> >
          >>
          >
          >

Windows 8 RDP error security package error occurred in the transport layer.

We have an issue where in windows 7 this rdp works fine but windows 8 gives this error on all machines.
Your computer can't connect to the remote computer because a security package error occurred in the transport layer. Retry the connection or contact your network administrator for assistance.

Hi,
Thanks for your post.
Please elaborate your scenario. Which OS version you trying to access? Windows Server 2012 or earlier version? Trying to access Session Host, RemoteApp or VM?
Please install latest Windows update on both side. Verify the port 3389 was not blocked by firewall, anti-virus or intermediate device. In addition, check the event viewer, to see if any related error was recorded.
Best Regards,
Aiden
If you have any feedback on our support, please click
here
Aiden Cao
TechNet Community Support

Dsee 6.3.1 - disable non-secure port

I disabled access to the non-secure port on my ldapserver as I only want clients to talk to my server using ssl (tls:simple)
root@ldapserver#/> dsconf set-server-prop ldap-port:disabled
After the compulsory restart, I was no longer able to bind a client (even if I tell it to connect on port 636) :
root@ldapclient #/> ldapclient init -v -a profileName=SB -a domainName=unix.mydomain.com -a proxyDN=cn=proxyagent,ou=profile,dc=unix,dc=mydomain
,dc=com ldapserver.mydomain.com:636
Parsing profileName=SB
Parsing proxyDN=cn=proxyagent,ou=profile,dc=unix,dc=mydomain,dc=com
Arguments parsed:
proxyDN: cn=proxyagent,ou=profile,dc=unix,dc=mydomain,dc=com
profileName: SB
defaultServerList: ldapserver.mydomain.com:636
Handling init option
About to configure machine by downloading a profile
findBaseDN: begins
findBaseDN: ldap not running
findBaseDN: calling __ns_ldap_default_config()
__ns_ldap_list return NULL resultp
findBaseDN: Err exit
LDAP ERROR (85): Error occurred during receiving results. Timed out.
Failed to find defaultSearchBase for domain unix.mydomain.com
I know my certs are good as ldapsearch returns data as I would expect...
root@ldapclient #/> ldapsearch -Z -p 636 -h ldapserver.mydomain.com -P /var/ldap -b dc=unix,dc=mydomain,dc=com uid=myuser
returns my userid.
There is an anonymous read only ACI in place:
root@ldapclient #/> ldapsearch -Z -p 636 -h ldapserver.mydomain.com -P /var/ldap -b dc=unix,dc=mydomain,dc=com -s base "(objectclass=*)" aci
aci: (target ="ldap:///dc=unix,dc=mydomain,dc=com")(targetattr!="userPassword")(
version 3.0;acl "Anonymous read-search access";allow (read, search, compare)
(userdn = "ldap:///anyone");)
As soon as I re-enable standard 389 access the client init works fine again....
Am I missing something here?
Does the `ldapclient init` command need to make a 389 connection first before it downloads the profile which tells it to use tls:simple and therefore port 636 from then onwards?

quote:
SSL enables support for the Start TLS extended operation that provides security on a regular LDAP connection. Clients can bind to the non-SSL port and then use the Transport Layer Security protocol to initiate an SSL connection. The Start TLS operation allows more flexibility for clients, and can help simplify port allocation.
[http://docs.sun.com/app/docs/doc/820-2765/gdzdc?l=en&a=view]

How to disable non secure port on Sun Java System Directory Server 5.2

Hi, can someone tell me how to disable the non secure port 389 on the SJS Directory Server 5.2? I only see two options for the directory server to listen on the non secure port or both secure and non secure ports. I see that someone mentioned to change the port the loopback ip address but the gui doesn't allow that.
Any help is appreciated.
Thanks,
Mike

Yep! You can add the loopback address to the listen host attr, directly to the dse.ldif (insntace stopped of course) or ldapmodify the config entry

SSO Configuration Assistant ERROR:ERROR : Exception while configing SSO DAD

I can't get rid of this error when installing Infrastructure;ERROR : Exception while configing SSO DAD : PLEASE HELP THANKS
DÃ©connectÃ© de Oracle9i Enterprise Edition Release 9.0.1.5.1 - Production
With the Partitioning option
JServer Release 9.0.1.4.0 - Production
NLS_LANG character set = WE8MSWIN1252
NLS_LANG param = FRENCH_FRANCE.WE8MSWIN1252
ERROR : Exception while configing SSO DAD :
java.net.SocketException: Connection reset
     at java.net.SocketInputStream.read(SocketInputStream.java:168)
     at sun.nio.cs.StreamDecoder$CharsetSD.readBytes(StreamDecoder.java:408)
     at sun.nio.cs.StreamDecoder$CharsetSD.implRead(StreamDecoder.java:450)
     at sun.nio.cs.StreamDecoder.read(StreamDecoder.java:182)
     at java.io.InputStreamReader.read(InputStreamReader.java:167)
     at java.io.BufferedReader.fill(BufferedReader.java:136)
     at java.io.BufferedReader.read1(BufferedReader.java:187)
     at java.io.BufferedReader.read(BufferedReader.java:261)
     at oracle.ias.sysmgmt.clustermanagement.OpmnAgent.waitForOpmnReponse(Unknown Source)
     at oracle.ias.sysmgmt.clustermanagement.OpmnAgent.sendHTTPRequest(Unknown Source)
     at oracle.ias.sysmgmt.clustermanagement.OpmnAgent.sendRequest(Unknown Source)
     at oracle.ias.sysmgmt.task.ProcessManager.start(Unknown Source)
     at oracle.ias.sysmgmt.task.TaskMaster.daemonStart(Unknown Source)
     at oracle.ias.sysmgmt.task.TaskMaster.sysInit(Unknown Source)
     at oracle.ias.sysmgmt.task.TaskMaster.sysInit(Unknown Source)
     at oracle.ias.sysmgmt.task.InstanceManager.sysInit(Unknown Source)
     at oracle.ias.sysmgmt.task.InstanceManager.init(Unknown Source)
     at oracle.ias.sysmgmt.EntryPoint.init(Unknown Source)
     at oracle.webdb.config.smi.GeneralConfig.<init>(Unknown Source)
     at oracle.webdb.config.smi.GeneralDADConfig.<init>(Unknown Source)
     at oracle.webdb.config.smi.DADConfig904Imp.<init>(Unknown Source)
     at oracle.webdb.config.smi.ConfigFactory.getGeneralDADConfig(Unknown Source)
     at oracle.webdb.config.smi.ConfigFactory.getDADConfig904(Unknown Source)
     at oracle.webdb.config.smi.ConfigFactory.getDADConfigLatest(Unknown Source)
     at oracle.webdb.config.smi.ConfigFactory.getDADConfigLatest(Unknown Source)
     at oracle.security.sso.SSOConfigAssistant.configDAD(SSOConfigAssistant.java:1372)
     at oracle.security.sso.SSOConfigAssistant.ssoConfig(SSOConfigAssistant.java:1164)
     at oracle.security.sso.SSOConfigAssistant.main(SSOConfigAssistant.java:162)
Please fix the error reported in the stack trace above and re-run SSO Config Tool.
C:\ORACLASAS\AS\jdk\bin\java
-cp
C:\ORACLASAS\AS\lib\xmlparserv2.jar;C:\ORACLASAS\AS\sysman\webapps\emd\WEB-INF\lib\emd.jar;C:\ORACLASAS\AS\sysman\webapps\emd\WEB-INF\lib\log4j-core.jar;C:\ORACLASAS\AS\lib\emSDK.jar
-DORACLE_HOME=C:\ORACLASAS\AS
oracle.sysman.emSDK.conf.TargetInstaller
deletetarget
oracle_sso_server
AS.jpio.hd.free.fr_Single Sign-On:orasso
C:\ORACLASAS\AS\jdk\bin\java
-cp
C:\ORACLASAS\AS\lib\xmlparserv2.jar;C:\ORACLASAS\AS\sysman\webapps\emd\WEB-INF\lib\emd.jar;C:\ORACLASAS\AS\sysman\webapps\emd\WEB-INF\lib\log4j-core.jar;C:\ORACLASAS\AS\lib\emSDK.jar
-DORACLE_HOME=C:\ORACLASAS\AS
oracle.sysman.emSDK.conf.TargetInstaller
addtarget
C:\ORACLASAS\AS\sso\sso_server_target2add.xml
Configuring SSO languages with the following language code:
f, us, frc
Installing language f ...
calling sqlldr
ORACLE_HOME=C:\ORACLASAS\AS
NLS_LANG=AMERICAN_AMERICA.WE8MSWIN1252
windir=C:\WINNT
SystemRoot=C:\WINNT
C:\ORACLASAS\AS\bin\sqlldr userid='orasso@cn=asdb,cn=oraclecontext' control=C:\ORACLASAS\AS\sso\nlsres\ctl\f\wwcf.ctl log=C:\ORACLASAS\AS\sso\log\wwcf.log bad=C:\ORACLASAS\AS\sso\log\wwcf.bad
SQL*Plus: Release 9.0.1.4.0 - Production on Me Sep 22 20:53:22 2004
(c) Copyright 2001 Oracle Corporation. All rights reserved.
SQL> ConnectÃ©.
SQL> ancien     3 : if '&&1' = 'zhs'
nouveau 3 : if 'f' = 'zhs'
ancien     6 :     set installed = 1, available = '&&2'
nouveau 6 :     set installed = 1, available = '1'
ancien     7 :     where databaseabbreviation = '&&1'
nouveau 7 :     where databaseabbreviation = 'f'
ancien     9 : elsif '&&1' = 'zht'
nouveau 9 : elsif 'f' = 'zht'
ancien     12 :     set installed = 1, available = '&&2'
nouveau 12 :     set installed = 1, available = '1'
ancien     13 :     where databaseabbreviation = '&&1'
nouveau 13 :     where databaseabbreviation = 'f'
ancien     15 : elsif '&&1' = 'esa'
nouveau 15 : elsif 'f' = 'esa'
ancien     18 :     set installed = 1, available = '&&2'
nouveau 18 :     set installed = 1, available = '1'
ancien     19 :     where databaseabbreviation = '&&1'
nouveau 19 :     where databaseabbreviation = 'f'
ancien     23 :     set installed = 1, available = '&&2'
nouveau 23 :     set installed = 1, available = '1'
ancien     24 :     where databaseabbreviation = '&&1';
nouveau 24 :     where databaseabbreviation = 'f';
ProcÃ©dure PL/SQL terminÃ©e avec succÃ¨s.
ancien     26 :     l_updated_lang varchar2(10) := '&&1';
nouveau 26 :     l_updated_lang varchar2(10) := 'f';
ProcÃ©dure PL/SQL terminÃ©e avec succÃ¨s.
DÃ©connectÃ© de Oracle9i Enterprise Edition Release 9.0.1.5.1 - Production
With the Partitioning option
JServer Release 9.0.1.4.0 - Production
Language us is already installed.
Installing language frc ...
calling sqlldr
ORACLE_HOME=C:\ORACLASAS\AS
NLS_LANG=AMERICAN_AMERICA.WE8MSWIN1252
windir=C:\WINNT
SystemRoot=C:\WINNT
C:\ORACLASAS\AS\bin\sqlldr userid='orasso@cn=asdb,cn=oraclecontext' control=C:\ORACLASAS\AS\sso\nlsres\ctl\frc\wwcfrc.ctl log=C:\ORACLASAS\AS\sso\log\wwcfrc.log bad=C:\ORACLASAS\AS\sso\log\wwcfrc.bad
SQL*Plus: Release 9.0.1.4.0 - Production on Me Sep 22 20:53:43 2004
(c) Copyright 2001 Oracle Corporation. All rights reserved.
SQL> ConnectÃ©.
SQL> ancien     3 : if '&&1' = 'zhs'
nouveau 3 : if 'frc' = 'zhs'
ancien     6 :     set installed = 1, available = '&&2'
nouveau 6 :     set installed = 1, available = '1'
ancien     7 :     where databaseabbreviation = '&&1'
nouveau 7 :     where databaseabbreviation = 'frc'
ancien     9 : elsif '&&1' = 'zht'
nouveau 9 : elsif 'frc' = 'zht'
ancien     12 :     set installed = 1, available = '&&2'
nouveau 12 :     set installed = 1, available = '1'
ancien     13 :     where databaseabbreviation = '&&1'
nouveau 13 :     where databaseabbreviation = 'frc'
ancien     15 : elsif '&&1' = 'esa'
nouveau 15 : elsif 'frc' = 'esa'
ancien     18 :     set installed = 1, available = '&&2'
nouveau 18 :     set installed = 1, available = '1'
ancien     19 :     where databaseabbreviation = '&&1'
nouveau 19 :     where databaseabbreviation = 'frc'
ancien     23 :     set installed = 1, available = '&&2'
nouveau 23 :     set installed = 1, available = '1'
ancien     24 :     where databaseabbreviation = '&&1';
nouveau 24 :     where databaseabbreviation = 'frc';
ProcÃ©dure PL/SQL terminÃ©e avec succÃ¨s.
ancien     26 :     l_updated_lang varchar2(10) := '&&1';
nouveau 26 :     l_updated_lang varchar2(10) := 'frc';
ProcÃ©dure PL/SQL terminÃ©e avec succÃ¨s.
DÃ©connectÃ© de Oracle9i Enterprise Edition Release 9.0.1.5.1 - Production
With the Partitioning option
JServer Release 9.0.1.4.0 - Production
Wed Sep 22 20:55:23 CEST 2004
Parameters received by ssoca : param0:config param1:C:\ORACLASAS\AS param2:cn=orcladmin param3:***** param4:FRENCH_FRANCE.WE8MSWIN1252 param5:http param6:jpio.hd.free.fr param7:7777 param8:fr,en,fr_CA
Content of ssoca config file is :
-- listing properties --
config_sso_oid=true
config_lang=true
config_sso_seed=true
config_targets_xml=true
config_ssoupg=true
config_dad=true
SSO seed is already configured in the database.
pre-existing entry ldap_host = jpio.hd.free.fr
pre-existing entry ldap_port = 3060
pre-existing entry app_dn = orclApplicationCommonName=ORASSO_SSOSERVER,cn=SSO,cn=Products,cn=OracleContext
pre-existing entry app_pwd = *****
NLS_LANG character set = WE8MSWIN1252
NLS_LANG param = FRENCH_FRANCE.WE8MSWIN1252
ERROR : Exception while configing SSO DAD :
java.net.SocketException: Connection reset
     at java.net.SocketInputStream.read(SocketInputStream.java:168)
     at sun.nio.cs.StreamDecoder$CharsetSD.readBytes(StreamDecoder.java:408)
     at sun.nio.cs.StreamDecoder$CharsetSD.implRead(StreamDecoder.java:450)
     at sun.nio.cs.StreamDecoder.read(StreamDecoder.java:182)
     at java.io.InputStreamReader.read(InputStreamReader.java:167)
     at java.io.BufferedReader.fill(BufferedReader.java:136)
     at java.io.BufferedReader.read1(BufferedReader.java:187)
     at java.io.BufferedReader.read(BufferedReader.java:261)
     at oracle.ias.sysmgmt.clustermanagement.OpmnAgent.waitForOpmnReponse(Unknown Source)
     at oracle.ias.sysmgmt.clustermanagement.OpmnAgent.sendHTTPRequest(Unknown Source)
     at oracle.ias.sysmgmt.clustermanagement.OpmnAgent.getOpmnProcStatus(Unknown Source)
     at oracle.ias.sysmgmt.clustermanagement.OpmnAgent.getProcessStatus(Unknown Source)
     at oracle.ias.sysmgmt.clustermanagement.OpmnAgent.getComponentProcessStatus(Unknown Source)
     at oracle.ias.sysmgmt.task.ProcessManager.isDaemonUp(Unknown Source)
     at oracle.ias.sysmgmt.task.ProcessManager.isDaemonUp(Unknown Source)
     at oracle.ias.sysmgmt.task.TaskMaster.isDaemonUp(Unknown Source)
     at oracle.ias.sysmgmt.clustermanagement.ClusterManager.reloadOpmn(Unknown Source)
     at oracle.ias.opmn.smiplugin.OpmnPlugin.reloadOpmnSynchronous(OpmnPlugin.java:256)
     at oracle.ias.opmn.smiplugin.OpmnPlugin.commit(OpmnPlugin.java:242)
     at oracle.ias.sysmgmt.repository.DcmPlugin.commit(Unknown Source)
     at oracle.ias.sysmgmt.repository.PluginCollection.commitResyncPlugins(Unknown Source)
     at oracle.ias.sysmgmt.repository.RepositoryImpl._syncUpFromPersistence(Unknown Source)
     at oracle.ias.sysmgmt.repository.RepositoryImpl.syncUpTopologyConfigurationFromPersistence(Unknown Source)
     at oracle.ias.sysmgmt.configsvc.ConfigurationServiceImpl.syncUpTopologyConfiguration(Unknown Source)
     at oracle.ias.sysmgmt.task.ConfigAdapter.resyncTopologyConfiguration(Unknown Source)
     at oracle.ias.sysmgmt.task.TaskMaster.internal_resync(Unknown Source)
     at oracle.ias.sysmgmt.task.TaskMaster.sysInit(Unknown Source)
     at oracle.ias.sysmgmt.task.TaskMaster.sysInit(Unknown Source)
     at oracle.ias.sysmgmt.task.InstanceManager.sysInit(Unknown Source)
     at oracle.ias.sysmgmt.task.InstanceManager.init(Unknown Source)
     at oracle.ias.sysmgmt.cmdline.DcmCmdLine.execute(Unknown Source)
     at oracle.ias.sysmgmt.cmdline.DcmCmdLine.main(Unknown Source)
Please fix the error reported in the stack trace above and re-run SSO Config Tool.
C:\ORACLASAS\AS\jdk\bin\java
-cp

Jacques, this looks like a network error, maybe you have a firewall which is blocking the network acces for some programs?
I saw something similar to this on my Windows XP machine after installing Service Pack 2 which configures alot of security.
NOTE: Windows XP SP2 is not supported yet because of these reason's, we haven't finished testing it yet.

Window 8.1 update & invalid security certificate errors

I set up my new PC 2 days ago running Windows 8.1. I was able to visit all websites, including secure ones, w/no issues via Firefox. Last night, suddenly I was unable to access many secure websites. These include Google (Gmail) & Ilines (email). Here is a copy of the Google error:
"mail.google.com uses an invalid security certificate. The certificate is not trusted because the issuer certificate is unknown. (Error code: sec_error_unknown_issuer)"
There is no button to bypass, as I have seen in the past. I tried deleting cert8.db which didn't resolve anything. I have also tried adding exceptions which also don't resolve the issue.
I searched support & found the link for the MS document (link below) indicating that FF & Windows Family Safety certificates are not playing nice.
http://support.microsoft.com/kb/2965142/en-us#appliesto
I tried to follow the guide, but when I get to step 6, there is no Microsoft Family Safety Certificate in the Trusted Root Certificates Authorities to export. For reference, I do not specifically have Family Safety enabled & am running my PC as admin, no other users. I personally have no use for this but it is my understanding that it cannot be uninstalled, either.
I have spent hours researching & making adjustments to different settings to no avail. It is frustrating enough setting up a new PC & transferring info w/out this extra hassle. Does anyone have any other suggestions? FF is my preferred browser, but if this can't be resolved I will need to use something else so that I can access these important websites.

Thanks for the feedback cor-el. Here are the results:
1. Installed Kaspersky certificate per link= no change
2. Turned off Kaspersky= able to log in to Gmail but not the other secure sites I am having probs with
3. Booted in Safe Networking mode= able to log in to Gmail but not the other secure sites. Same blocking errors on Gmail, etc when returned to reg mode.
Just FYI, I get 2 different secure connection errors:
Gmail: "mail.google.com uses an invalid security certificate. The certificate is not trusted because the issuer certificate is unknown. (Error code: sec_error_unknown_issuer)"
Ilines: "Secure Connection Failed An error occurred during a connection to mail.ilines.net. Peer's certificate has an invalid signature. (Error code: sec_error_bad_signature)"

"Security policy error" while setting up "Microsoft Exchange Hosted Services" Exchange Account (corporate user)

I'm a corporate user with a very large company that is using Microsoft Hosted Exchange services actually hosted by Microsoft employees at their facilities. I called Palm support and they were clueless and zero help. The lady pointed me to some Palm KB article that I had already read and only remotely had anything to do with my problem. I see nothing on this error message in the forums and google searches. Sprint has even replaced my palm pre due to other reasons and the same error occurs after I configure the exchange account. I'm also seeing the error when I configure my account on my wifes brand new pixi. Both our pre and pixi already have exchange accounts successfully configured on our phones that are hosted by sherweb. The sherweb exchange accounts work without issue. I have tried configuring this microsoft hosted exchange account 5-6 times with the same result. It accepts my configuration information and adds it to the list of available email accounts in the pre. However, it keeps popping up this message stating "Security policy error: "Exchange... Tap for details" (with a yellow exclamation mark). Then it says "Security Policy Error" The account Exchange (first part of my email address) is disabled because security policies cannot be set." "Leave it disabled" or "Remove Account". I know something is working because it enforced a Password or Pin policy on to my phone which is not required unless this account has been added. I can also see it in the "Mobile Devices" section of web outlook when I login. This is the place in web outlook where you can see the last time the device synced, where you can remote wipe the phone etc. If anyone has any idea how to resolve my issue please post. Any ideas? I'm fresh out of ideas on this problem and very frustrated with Palm Developers. Just another example of poor development and testing practices by Palm. I hope they correct this issue on subsequent releases but I am only marginally optimistic that they will ever get this exchange mail support to the level necessary to support large corporations. What I do know is that my Microsoft Hosted Exchange account works fine on a Windows Mobile phone and a iPhone 3GS (confirmed by other coworks who have configured their phones using our exchange services). As a result, I have no choice but to blame Palm for this problem instead of Microsoft. Palm please fully support microsoft exchange mail users!!!!
Post relates to: Pre p100eww (Sprint)
This question was solved.
View Solution.

From my understanding of EAS and PDA devices, if the server as a policy to enforce and the device cannot provide that policy then the server will not allow the device to connect. The KB I gave you has a listing of what policies the devices supports, if your server supports more than that then it could deny the connection. As for what the iPhone does and does not do we cannot answer that due to we are not iPhone.
I did find an article that may explain a little better for PDA and exchange: http://www.infoworld.com/d/mobilize/how-avoid-smartphone-exchange-policy-lie-004

Security Zone error.

I have a federated portal, i.e. producer - consumer relationship (7.0 sp18) and when I federate a BEx qry I'm getting a Security Zone error with the following message:
Caused by: com.sapportals.portal.pcd.gl.PermissionControlException: Access denied (Object(s): com.sap.portal.system/security/sap.com/NetWeaver.Portal/high_safety/com.sap.portal.runtime.system.console/components/default)
I did the following:
Go to System Administration -> Support.
Under the Area column select Portal Runtime. Scroll down to the JNDI Browsers section, and select Security Zones Browser. Drill down to sap.com/NetWeaver.Portal/high_safety/com.sap.portal.runtime.system.console/components/default.
I'm seeing "No service is bound to this secutiy zone"
I understand I need to go to System Administration -> Permissions,
Browse to Security Zones:
sap.com/NetWeaver.Portal/high_safety/com.sap.portal.runtime.system.console/components/default
and right-click -> Edit Permissions.
All I have to do is add end-user-read permissions is that correct?
I currenlty see just content_admin, super_admin, and system_admin all with End USer checked. Do I have to add my "Everyone" role as an assigned permission and ck End User?
Then when I go back to the Support Desk I see a service bound?
Mike

From what I am seeing I now understand that in my federated env I am generating a URL that exceeds 2083 characters. We are using IE Version 7.0.5730.13CO
I also understand that I am not having this issue when using Firefox.
These urls are getting generated when the users save a BEx qry to the BEx Portfolio or their My Portfolio.
The reason I was getting the security errors was the url's were getting chopped off and the users did not have access to those components.
Anyone implement a method to fix this issue?
MIke

Crystal Reports Logon Error ("Security Plugin Error")

Hi there,
I have an issue that I haven't been able to resolve for the past couple days. I had to reinstall Crystal Reports XI on a user's computer, and now we can't log into the BusinessObjects Enterprise server from it using LDAP. I have successfully logged in using the Enterprise authentication mode, but not the LDAP authentication mode.
Here was my general trail of attempts:
Completely uninstalled Crystal Reports XI
Installed Crystal Reports XI
Installed Crystal Reports XI SP1
Could not log into BOE using LDAP; received the error "Security plugin error: Failed to set parameters on plugin"
Installed Crystal Reports XI SP2
Could not log into BOE using LDAP; received the error "Security plugin error: Failed to set parameters on plugin" (despite the release notes of SP2 saying that this issue has been resolved)
Installed Crystal Reports XI SP4 (as SP3 was not available on the downloads section of the SAP/BO service portal, and I heard it had a bug)
Could not log into BOE using LDAP; received the error "Security plugin error: Failed to set parameters on plugin"
Installed Crystal Reports XI Hotfix 11
Could not log into BOE using LDAP; received the error "Security plugin error: Failed to set parameters on plugin"
Installed Crystal Reports XI Hotfix 12
Could not log into BOE using LDAP; received the error "Security plugin error: Failed to set parameters on plugin"
I was able to log into InfoView via LDAP on the above workstation.
I've also tried installing Crystal Reports XI, following the same steps as above, on second workstation in order to determine if it was an issue with the first workstation I was addressing. But the second workstation had the same issue. However, I was also able to log into InfoView via LDAP on this second workstation.
I was also able to authenticate just fine on my workstation via Crystal Reports using LDAP, but its Crystal Reports installation took place before I began working here.
I have searched the SAP/BO portal, and I'm still left with the following questions on the following posts:
[Note 1207373|https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/oss_notes/sdn_oss_boj_erq/sap(bD1lbiZjPTAwMQ==)/bc/bsp/spn/scn_bosap/notes%7B6163636573733d36393736354636443646363436353344333933393338323636393736354637333631373036453646373436353733354636453735364436323635373233443330333033303331333233303337333333373333%7D.do] - My issue is not regarding communicating with the LDAP server because the user logs into her workstation everyday using LDAP. Could there be another solution?
[Log On error|https://forums.sdn.sap.com/click.jspa?searchID=18094821&messageID=5980948] - I couldn't find the "Server" service on the PC. What is the actual name of the service? Also, where can I go to find the release number of my BOE server?
[Authentication issues with the universes connection type|https://forums.sdn.sap.com/click.jspa?searchID=18094821&messageID=6316866] - I'm not sure what to do as I think my BOE server is XI R1.
[Cannot access the repository. (USR0013)|https://forums.sdn.sap.com/click.jspa?searchID=18094821&messageID=6327052] - I don't think this is the same issue as I'm experiencing. Would I need to restart the CMS service on the BOE server, even though other workstations can log on to the BOE server using LDAP?
[LDAP Authentication issue whille connecting to BOXIR2 usinng designer|https://forums.sdn.sap.com/click.jspa?searchID=18094821&messageID=6253470] - InfoView is not a problem to log into. Is the software inventory tool referred to in this thread the same as "Add or Remove Programs"? If so, the BOE version is not the same as any of the Crystal versions on any of the workstations I've worked with. But mine still authenticates. I also don't think it's a firewall issue as the only thing that changed on the workstations I've worked with is that I've uninstalled and/or installed Crystal Reports.
[Re: setting up AD and Kerberos with Java|https://forums.sdn.sap.com/click.jspa?searchID=18094821&messageID=6024617] - I don't think this is my issue...?
Here are the specs of the machines:
First Workstation:
Windows XP SP3
Crystal Reports 11.0.0.895 (after all the installs were over and I rolled back a couple SPs)
Second Worktation:
Windows XP SP3
Crystal Reports 11.0.0.2812 (after all the installs were over)
My Workstation:
Windows XP SP2
Crystal Reports 11.0.0.1994
BOE Server:
BOEXI 11.0.0.7485
CMS 11.0.0.1886
I am very new to Crystal Reports, so I may have missed something in the installation that would have prevented this. Is there a way to make Crystal Reports "point" to the BOE server via LDAP? I couldn't find anything like this though. Any help you could provide would be great!
Thanks so much in advance!
Bryce

Thanks Tim,
I cannot seem to find Crystal Reports XI Release 1 Service Pack 3. All I can find on the SAP Support Portal (under the Business Objects Support - Software Downloads section) are SP1, SP2, and SP4.
We can access BOE via LDAP from other Crystal clients, and we can access InfoView from other clients also. The client that is having trouble accessing BOE with Crystal Reports via LDAP is able to access InfoView.
Should I try CR XI R1 SP3? If so, could you point me in the right direction to find it?
Thanks!
Bryce

Logical port error (WS_LOGICAL_PORT) when consuming WS in PI

Hi All,
I am trying to integrate simple Currency Conversion Web Service witm my ECC program.
Program displays two fields in the selection screen (Currency From and Currency To)
WS is: http://www.webservicex.com/ws/WSDetails.aspx?WSID=10&CATID=2
The scenario is as below:
Proxy (Z-PROGRAM ) <-sync-> PI <-sync-> WS (Currency Convertor)
Looks like ABAP Proxy is done ok.
PI configuration also looks ok as I am trying it in IB's Test Configuration tool - all steps are 'Green / Passed'
Based on WSDL 3 interfaces were generated:
CurrencyConvertorHttpPost
CurrencyConvertorHttpGet
CurrencyConvertorSoap
I am using Soap one... along with WS Communication Channel
CC has configuren itself based on WSDL likn provided,
Technical Transport Settings were set to:
Target Host:               www.webservicex.net
Service Name / Port:     -1
URL Access Path:          /CurrencyConvertor.asmx
Transport Binding:          SOAP 1.1 Using HTTP
Why am I getting logical port error?
Error while determining logical port Cannot find logical port for agreement EAC1E5CF03FD3B2C827ADDECA2EA6B26 and interface urn:webservicex:com:test:currencyrates.CurrencyConvertorSoap
I searched the web for error message and I found obsolete logical port configuration using LPCONFIG, and also some 'new' approach with SOAMANAGER LogPort configuraton
(When I try to do this as suggested in [document |http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/b04408cc-f10e-2c10-b5b7-af11026b2393?QuickLink=index&overridelayout=true]
then I cannot see my newly created services on the list)
... but is this the right track to follow?
Should I run Logical Port configuration in PI?
I would appreciate your comments on this.
Regards,
bob.

Hello,
Why am I getting logical port error?
Error while determining logical port Cannot find logical port for agreement EAC1E5CF03FD3B2C827ADDECA2EA6B26 and interface urn:webservicex:com:test:currencyrates.CurrencyConvertorSoap
WS Adapter is used for those that are using WS-RM (Webservice-Reliable Messaging)...See this blog
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/b00bbb77-75bc-2a10-6b9a-a6f8161515a6, but I think for now this is limited to SAP-to-SAP connections. That is why in your error it is searching for a logical port (ABAP Proxy).
You should be using the SOAP Receiver Adapter instead.
Hope this helps,
Mark

Secure port error en HttpClusterServlet config

Similar Messages

Maybe you are looking for