Unable to resolve the domain

Question

The app server is:
Sun GlassFish Enterprise Server v2.1 (9.1.1) (build b60e-fcs)
I'm running:
Sun Convergence 1.0-14.01 (built June 9 2010 - 23:49:24)
Sun Java(tm) System Messaging Server 7u3-17.01 64bit (built Jun 8 2010)
Sun Java(tm) System Calendar Server 6.3-19.01 (built Aug 26 2009)
Sun IM - 8u2-02.04
This is in the iwc.log:
AUTH: ERROR from com.sun.comms.client.security.auth.modules.impl.SunAuthCallBack  Thread httpSSLWorkerThread-443-1 at 2010-08-18 17:31:53,397 - Unable to resolve the domain school.edu  Failed. could not find:school.edu under o=schoolThe base dn is o=school
under this is o=school.edu
under this is People, etc.
The directory is a replica of our production dir - and runs on our testmail.school.edu box along with all (or most) of Comms Suite 7. Accounts have addresses like [email protected] I have used testmail.school.edu as the default domain in the configuration steps for each application.
If I add an associatedDomain with the value "school.edu" for o=school.edu (under o=school) in addition to the existing sunPreferredDomain and associatedDomain values which are testmail.school.edu, the error goes away - but IM doesn't work unless I login with a uid like "[email protected]" instead of just "me".
If I do not have an associatedDomain of "school.edu" for o=school.edu (under o=school), I can login with uid me - and everything works - but that error is there.
Thanks,
s7

Answer 1

shjorth wrote:
starman7 wrote:
What is the URL used to access the Convergence instance e.g. http://testmail.school.edu/iwc?
Yes /iwc - and then it redirects to: /iwc_static/layout/login.html?lang=en-us&14.01_234924&svcs=abs,im,mail,calendarWhat is the entire URL?testmail.school.edu
which redirects to:
https://testmail.school.edu/iwc
which ends up here:
It's https://testmail.school.edu/iwc_static/layout/login.html?lang=en-us&14.01_234924&svcs=abs,im,mail,calendar
>
me@x1$ /opt/sun/comms/messaging64/sbin/imsimta test -domain
DOMAIN_MAP> verify
%DMAP-E-DOMAINMULTDEF, Domain 'testmail.school.edu' multiply defined by entries with DNs 'o=school.edu,o=school' and 'o=school.edu,o=school'Have you set both "sunPreferredDomain: testmail.school.edu" and "associatedDomain: testmail.school.edu" on the "dn: o=school.edu,o=school" entry?Yes. assocatedDomain of school.edu might not have been set when I ran the imsimta test domain.
>
%DMAP-E-NODOMAINNAME, Domain entry with DN 'o=business,o=school' does not have a domain name
%DMAP-E-NODOMAINNAME, Domain entry with DN 'o=ESGDomainsRoot,o=business,o=school' does not have a domain name
%DMAP-E-NODOMAINNAME, Domain entry with DN 'o=VISDomainsRoot,o=business,o=school' does not have a domain name
%DMAP-E-NODOMAINNAME, Domain entry with DN 'o=SharedDomainsRoot,o=business,o=school' does not have a domain name
%DMAP-E-NODOMAINNAME, Domain entry with DN 'o=ESG,o=siroe.com,o=SharedDomainsRoot,o=business,o=school' does not have a domain name
%DMAP-E-NODOMAINNAME, Domain entry with DN 'o=VIS,o=siroe.com,o=SharedDomainsRoot,o=business,o=school' does not have a domain name
%DMAP-E-NODOMAINNAME, Domain entry with DN 'o=DEF,o=VIS,o=siroe.com,o=SharedDomainsRoot,o=business,o=school' does not have a domain nameThe above entries appear to be those added by Delegated Administrator when you select "add sample domain" during configuration.
iim.policy.modules = "iim_ldap_schema2"
iim_ldap.schema2.domain_config_root = "o=school" ( - should that be o=school.edu,o=school - ?)"o=school" is correct.
What do you have configured for "default.domains" in the Convergence httpbind.conf file (i.e. the one in /opt/sun/comms/iwc/config)?I have:
default.domains=testmail.school.edu
When you added "associatedDomain: school.edu" to the "dn: o=school.edu,o=school" entry and logged in with "uid" only, you were actually logged in as "[email protected]".
Since you don't have school.edu in the default.domains setting above, IM didn't work.
So in this scenario you would need to set:
default.domains=testmail.school.edu school.edu
I tried this while having the school.edu as an associtedDomain to: dn: o=school.edu, o=school and while it worked I saw different errors -
AUTH: ERROR from com.sun.comms.client.security.sso.impl.SunBaseIdentitySSOProvider  Thread httpSSLWorkerThread-443-6 at 2010-08-21 10:35:08,239 - Exception while performing SSO against OpenSSO AQIC5wM2LY4Sfcxkv948H6xWMQstUSYrTMc8WxxfpnKkdJQ.*AAJTSQACMDMAAlNLAAk5OTM0MTM5MzIAAlMxAAIwMQ..* Session was not obtained.
AUTH: ERROR from com.sun.comms.client.web.sso.SSOFilter  Thread httpSSLWorkerThread-443-6 at 2010-08-21 10:35:08,241 - Exception while performing Sigle Sign On com.iplanet.sso.SSOException: AQIC5wM2LY4Sfcxkv948H6xWMQstUSYrTMc8WxxfpnKkdJQ.*AAJTSQACMDMAAlNLAAk5OTM0MTM5MzIAAlMxAAIwMQ..* Session was not obtained.
AUTH: ERROR from com.sun.comms.client.security.sso.impl.SunBaseIdentitySSOProvider  Thread httpSSLWorkerThread-443-0 at 2010-08-21 10:35:35,826 - Exception while performing SSO against OpenSSO AQIC5wM2LY4Sfcxkv948H6xWMQstUSYrTMc8WxxfpnKkdJQ.*AAJTSQACMDMAAlNLAAk5OTM0MTM5MzIAAlMxAAIwMQ..* Session was not obtained.
AUTH: ERROR from com.sun.comms.client.web.sso.SSOFilter  Thread httpSSLWorkerThread-443-0 at 2010-08-21 10:35:35,831 - Exception while performing Sigle Sign On com.iplanet.sso.SSOException: AQIC5wM2LY4Sfcxkv948H6xWMQstUSYrTMc8WxxfpnKkdJQ.*AAJTSQACMDMAAlNLAAk5OTM0MTM5MzIAAlMxAAIwMQ..* Session was not obtained.
AUTH: WARN from com.sun.comms.client.protocol.delegate.agent.LoginContextAgent  Thread httpSSLWorkerThread-443-0 at 2010-08-21 10:35:35,874 - Subject not found in session, creating one
AUTH: INFO from com.sun.comms.client.security.auth.modules.impl.SunAuthCallBack  Thread httpSSLWorkerThread-443-0 at 2010-08-21 10:35:35,945 - User LoginID is me123
AUTH: INFO from com.sun.comms.client.security.auth.modules.impl.SunAuthCallBack  Thread httpSSLWorkerThread-443-0 at 2010-08-21 10:35:36,089 - User domain is school.edu
AUTH: INFO from com.sun.comms.client.security.auth.modules.impl.SunBaseIdentityLoginModule  Thread httpSSLWorkerThread-443-0 at 2010-08-21 10:35:36,498 - UserName: me123  Login success!!
AUTH: INFO from com.sun.comms.client.security.auth.CommsUserInitContext  Thread httpSSLWorkerThread-443-0 at 2010-08-21 10:35:36,639 - Loading user entry from LDAP
AUTH: INFO from com.sun.comms.client.security.auth.CommsUserInitContext  Thread httpSSLWorkerThread-443-0 at 2010-08-21 10:35:36,855 - User entry loaded successfully
PROTOCOL: WARN from com.sun.comms.client.protocol.delegate.agent.ClientOptionsAgent  Thread httpSSLWorkerThread-443-0 at 2010-08-21 10:35:37,134 - No domain found for Domain name  testmail.school.edu
AUTH: INFO from com.sun.comms.client.web.IwcCookieManager  Thread httpSSLWorkerThread-443-0 at 2010-08-21 10:35:37,139 - Preferred language for user is en
PROTOCOL: WARN from com.sun.comms.client.protocol.delegate.UserPrefsCommandDelegate  Thread httpSSLWorkerThread-443-4 at 2010-08-21 10:35:39,011 - get_allprefs.iwc : Service is not enabled : smime
PROTOCOL: WARN from com.sun.comms.client.protocol.delegate.agent.ClientOptionsAgent  Thread httpSSLWorkerThread-443-4 at 2010-08-21 10:35:39,048 - client preferences not found for domain: school.edu
PROXY_MAIL: INFO from com.sun.comms.client.web.services.sun.MailServiceProxy  Thread httpSSLWorkerThread-443-0 at 2010-08-21 10:35:40,682 - Performing Sun Mail Authentication
ADDRESS_BOOK: INFO from com.sun.comms.client.ab.coresrv.DBHandler  Thread httpSSLWorkerThread-443-3 at 2010-08-21 10:35:41,667 - Got DBPluginMap so will go back to one default.domains (dropping school.edu) and no school.edu associateDomain for dn: o=school.edu, o=school.
Is there a way I can login w/ uid only, and not need that school.edu associatedDomain, and not see either error in the log?
I also see this:
AUTH: ERROR from com.sun.comms.client.web.sso.SSOFilter  Thread pool-1-thread-3 at 2010-08-21 10:53:55,032 - Error obtaining Admin Password. Input length must be multiple of 8 when decrypting with padded cipher
Regards,
Shane.