fedora-idm-console is not working after ssl enabled

[s.varadha rajan]

Hi,

I have configured ssl settings as per the redhat official doc(
http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/8.2/html/Administ...
).

There is no issues with Directory server.after enabling ssl settings in the
Admin server and after restarted the admin server, i tried to login with
https://localhost:9830.it%27s not at all logging and in the Terminal throws
the below error.

Exception in thread "main" java.lang.UnsatisfiedLinkError: no jss4 in
java.library.path
at java.lang.ClassLoader.loadLibrary(ClassLoader.java:1681)
at java.lang.Runtime.loadLibrary0(Runtime.java:840)
at java.lang.System.loadLibrary(System.java:1047)
at
org.mozilla.jss.CryptoManager.loadNativeLibraries(CryptoManager.java:1339)
at org.mozilla.jss.CryptoManager.initialize(CryptoManager.java:827)
at org.mozilla.jss.CryptoManager.initialize(CryptoManager.java:800)
at com.netscape.management.client.util.UtilConsoleGlobals.initJSS(Unknown
Source)
at com.netscape.management.client.comm.HttpsChannel.<clinit>(Unknown Source)
at com.netscape.management.client.comm.HttpManager.createChannel(Unknown
Source)
at com.netscape.management.client.comm.CommManager.send(Unknown Source)
at com.netscape.management.client.comm.CommManager.send(Unknown Source)
at com.netscape.management.client.comm.HttpManager.get(Unknown Source)
at com.netscape.management.client.console.Console.invoke_task(Unknown
Source)
at com.netscape.management.client.console.Console.authenticate_user(Unknown
Source)
at com.netscape.management.client.console.Console.<init>(Unknown Source)
at com.netscape.management.client.console.Console.main(Unknown Source)

Please let me know the solution for this issue ?

Regards,
Varad

[Chun Tat David Chu]

Hi Varad,

The issue probably just as stated in the JAVA exception you are seeing.

The JSS library is missing.  The JSS library is not part of standard JAVA,
you will need to install it separately.

You issue should be either 1) JSS is not install or 2) JSS is not in your
classpath.

Try execute "rpm -qa | grep jss" and check if JSS is installed.

Here's the result when I run the above command.
rpm -qa | grep jss
jss-4.2.5-1

Good luck

- dc

2011/8/23 s.varadha rajan
> Hi,
>
> I have configured ssl settings as per the redhat official doc(
> http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/8.2/html/Administ...
> ).
>
> There is no issues with Directory server.after enabling ssl settings in the
> Admin server and after restarted the admin server, i tried to login with
> https://localhost:9830.it%27s not at all logging and in the Terminal throws
> the below error.
>
> Exception in thread "main" java.lang.UnsatisfiedLinkError: no jss4 in
> java.library.path
> at java.lang.ClassLoader.loadLibrary(ClassLoader.java:1681)
>  at java.lang.Runtime.loadLibrary0(Runtime.java:840)
> at java.lang.System.loadLibrary(System.java:1047)
>  at
> org.mozilla.jss.CryptoManager.loadNativeLibraries(CryptoManager.java:1339)
> at org.mozilla.jss.CryptoManager.initialize(CryptoManager.java:827)
>  at org.mozilla.jss.CryptoManager.initialize(CryptoManager.java:800)
> at com.netscape.management.client.util.UtilConsoleGlobals.initJSS(Unknown
> Source)
>  at com.netscape.management.client.comm.HttpsChannel.<clinit>(Unknown
> Source)
> at com.netscape.management.client.comm.HttpManager.createChannel(Unknown
> Source)
>  at com.netscape.management.client.comm.CommManager.send(Unknown Source)
> at com.netscape.management.client.comm.CommManager.send(Unknown Source)
>  at com.netscape.management.client.comm.HttpManager.get(Unknown Source)
> at com.netscape.management.client.console.Console.invoke_task(Unknown
> Source)
>  at
> com.netscape.management.client.console.Console.authenticate_user(Unknown
> Source)
> at com.netscape.management.client.console.Console.<init>(Unknown Source)
>  at com.netscape.management.client.console.Console.main(Unknown Source)
>
> Please let me know the solution for this issue ?
>
> Regards,
> Varad
>
> --
> 389 users mailing list
> [e-mail]
> https://admin.fedoraproject.org/mailman/listinfo/389-users

[s.varadha rajan]

Hi,

Thanks for the reply for you and team. yesterday i fixed that issue.my
system is having already jss4 installed and the problem is related to path.i
created "libjss4.so" link in my lib path, i.e /usr/lib as like,

root@varad:/usr/lib# ls -l libjss4.so
lrwxrwxrwx 1 root root 23 2011-08-23 18:24 libjss4.so ->
/usr/lib/jni/libjss4.so

After that, console asked for certificate acceptance and everything went
fine. this is ok for me.

*I have one more doubt*, same thing i accessed through browser such as
https://localhost:9830 and can login inside.but after that, i can't do any
activity inside.that mean, i cant manage anything like, how i manage from
fedora-idm-console.Is there anything needs to be configured in Apache side
or any other settings.if possible, kindly let me know the solution.

Regards,
Varad

2011/8/23 Chun Tat David Chu
> Hi Varad,
>
> The issue probably just as stated in the JAVA exception you are seeing.
>
> The JSS library is missing.  The JSS library is not part of standard JAVA,
> you will need to install it separately.
>
> You issue should be either 1) JSS is not install or 2) JSS is not in your
> classpath.
>
> Try execute "rpm -qa | grep jss" and check if JSS is installed.
>
> Here's the result when I run the above command.
> rpm -qa | grep jss
> jss-4.2.5-1
>
> Good luck
> dc
>
> 2011/8/23 s.varadha rajan
> > Hi,
> >
> > I have configured ssl settings as per the redhat official doc(
> > http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/8.2/html/Administ...
> > ).
> >
> > There is no issues with Directory server.after enabling ssl settings in
> > the Admin server and after restarted the admin server, i tried to login with
> > https://localhost:9830.it%27s not at all logging and in the Terminal throws
> > the below error.
> >
> > Exception in thread "main" java.lang.UnsatisfiedLinkError: no jss4 in
> > java.library.path
> > at java.lang.ClassLoader.loadLibrary(ClassLoader.java:1681)
> >  at java.lang.Runtime.loadLibrary0(Runtime.java:840)
> > at java.lang.System.loadLibrary(System.java:1047)
> >  at
> > org.mozilla.jss.CryptoManager.loadNativeLibraries(CryptoManager.java:1339)
> > at org.mozilla.jss.CryptoManager.initialize(CryptoManager.java:827)
> >  at org.mozilla.jss.CryptoManager.initialize(CryptoManager.java:800)
> > at com.netscape.management.client.util.UtilConsoleGlobals.initJSS(Unknown
> > Source)
> >  at com.netscape.management.client.comm.HttpsChannel.<clinit>(Unknown
> > Source)
> > at com.netscape.management.client.comm.HttpManager.createChannel(Unknown
> > Source)
> >  at com.netscape.management.client.comm.CommManager.send(Unknown Source)
> > at com.netscape.management.client.comm.CommManager.send(Unknown Source)
> >  at com.netscape.management.client.comm.HttpManager.get(Unknown Source)
> > at com.netscape.management.client.console.Console.invoke_task(Unknown
> > Source)
> >  at
> > com.netscape.management.client.console.Console.authenticate_user(Unknown
> > Source)
> > at com.netscape.management.client.console.Console.<init>(Unknown Source)
> >  at com.netscape.management.client.console.Console.main(Unknown Source)
> >
> > Please let me know the solution for this issue ?
> >
> > Regards,
> > Varad
> >
> > --
> > 389 users mailing list
> > [e-mail]
> > https://admin.fedoraproject.org/mailman/listinfo/389-users
>
> --
> 389 users mailing list
> [e-mail]
> https://admin.fedoraproject.org/mailman/listinfo/389-users

[Rich Megginson]

On 08/24/2011 12:26 AM, s.varadha rajan wrote:
> Hi,
>
> Thanks for the reply for you and team. yesterday i fixed that issue.my 
> system is having already jss4 installed and the problem is related to 
> path.i created "libjss4.so" link in my lib path, i.e /usr/lib as like,
>
> root@varad:/usr/lib# ls -l libjss4.so
> lrwxrwxrwx 1 root root 23 2011-08-23 18:24 libjss4.so -> 
> /usr/lib/jni/libjss4.so
>
> After that, console asked for certificate acceptance and everything 
> went fine. this is ok for me.
>
> *I have one more doubt*, same thing i accessed through browser such as 
> https://localhost:9830 and can login inside.but after that, i can't do 
> any activity inside.that mean, i cant manage anything like, how i 
> manage from fedora-idm-console.Is there anything needs to be 
> configured in Apache side or any other settings.if possible, kindly 
> let me know the solution.

The web interface provided by 389-admin doesn't do very much.  You might 
want to use 389-dsgw.
> Regards,
> Varad
>
> 2011/8/23 Chun Tat David Chu <[e-mail] 
> >
> Hi Varad,
>
> The issue probably just as stated in the JAVA exception you are
> seeing.
>
> The JSS library is missing.  The JSS library is not part of
> standard JAVA, you will need to install it separately.
>
> You issue should be either 1) JSS is not install or 2) JSS is not
> in your classpath.
>
> Try execute "rpm -qa | grep jss" and check if JSS is installed.
>
> Here's the result when I run the above command.
> rpm -qa | grep jss
> jss-4.2.5-1
>
> Good luck
>
> - dc
>
> 2011/8/23 s.varadha rajan <[e-mail]
> <mailto:[e-mail]>>
>
>     Hi,
>
>     I have configured ssl settings as per the redhat official
>     doc(http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/8.2/html/Administration_Guide/Managing_SSL.html#Managing_SSL-Using_certutil).
>
>     There is no issues with Directory server.after enabling ssl
>     settings in the Admin server and after restarted the admin
>     server, i tried to login with https://localhost:9830.it's not
>     at all logging and in the Terminal throws the below error.
>
>     Exception in thread "main" java.lang.UnsatisfiedLinkError: no
>     jss4 in java.library.path
>     at java.lang.ClassLoader.loadLibrary(ClassLoader.java:1681)
>     at java.lang.Runtime.loadLibrary0(Runtime.java:840)
>     at java.lang.System.loadLibrary(System.java:1047)
>     at
>     org.mozilla.jss.CryptoManager.loadNativeLibraries(CryptoManager.java:1339)
>     at
>     org.mozilla.jss.CryptoManager.initialize(CryptoManager.java:827)
>     at
>     org.mozilla.jss.CryptoManager.initialize(CryptoManager.java:800)
>     at
>     com.netscape.management.client.util.UtilConsoleGlobals.initJSS(Unknown
>     Source)
>     at
>     com.netscape.management.client.comm.HttpsChannel.<clinit>(Unknown
>     Source)
>     at
>     com.netscape.management.client.comm.HttpManager.createChannel(Unknown
>     Source)
>     at
>     com.netscape.management.client.comm.CommManager.send(Unknown
>     Source)
>     at
>     com.netscape.management.client.comm.CommManager.send(Unknown
>     Source)
>     at com.netscape.management.client.comm.HttpManager.get(Unknown
>     Source)
>     at
>     com.netscape.management.client.console.Console.invoke_task(Unknown
>     Source)
>     at
>     com.netscape.management.client.console.Console.authenticate_user(Unknown
>     Source)
>     at
>     com.netscape.management.client.console.Console.<init>(Unknown
>     Source)
>     at com.netscape.management.client.console.Console.main(Unknown
>     Source)
>
>     Please let me know the solution for this issue ?
>
>     Regards,
>     Varad
>
>
>     --
>     389 users mailing list
>     [e-mail]
>     <mailto:[e-mail]>
>     https://admin.fedoraproject.org/mailman/listinfo/389-users
>
>
>
> --
> 389 users mailing list
> [e-mail]
> <mailto:[e-mail]>
> https://admin.fedoraproject.org/mailman/listinfo/389-users
>
>
>
> --
> 389 users mailing list
> [e-mail]
> https://admin.fedoraproject.org/mailman/listinfo/389-users

[James Smallacombe]

> The web interface provided by 389-admin doesn't do very much.  You might
> want to use 389-dsgw.

Does anybody know if the DSGW interface is available for CentOS Directory Server? 
The RHDS docs mention it, but the only file that appears on the server were I
installed CDS is:  admserv_dsgw.html.  No conf files or anything else.  I had
installed the Webmin OpenLDAP client for managing users, but although it mostly
works, there are some compatibility issues and shortcomings.

[Rich Megginson]

On 08/24/2011 08:26 AM, [e-mail] wrote:
> > The web interface provided by 389-admin doesn't do very much.  You might
> > want to use 389-dsgw.
>
> Does anybody know if the DSGW interface is available for CentOS Directory Server?
> The RHDS docs mention it, but the only file that appears on the server were I
> installed CDS is:  admserv_dsgw.html.  No conf files or anything else.  I had
> installed the Webmin OpenLDAP client for managing users, but although it mostly
> works, there are some compatibility issues and shortcomings.

You could try installing 389-dsgw from EPEL5.
> --
> 389 users mailing list
> [e-mail]
> https://admin.fedoraproject.org/mailman/listinfo/389-users