[Fedora-directory-users] SSL issue

Rich Megginson rmeggins at redhat.com
Thu Feb 7 14:53:52 UTC 2008


Anand Vaddarapu wrote:
> Hi Rich,
>
> let me breifly explain my settings. I installed FDS in Virtual 
> Machine. Virtual Machine is running in windows machine. when i start 
> console from VM everything works fine. But when i start console from 
> windows machine, will take user logins and hangs while showing message 
> authenticating the user. thats all wont go further i have to kill the 
> console window. virtual machine and Windows are connect using network 
> bridge.
You could try editing the windows console batch file to add -D 9 after 
the Console class on the java command line - see if that gives you any 
more information.

If you suspect it is a problem with admin server host/ip access control, 
try this - http://directory.fedoraproject.org/wiki/Howto:AdminServerLDAPMgmt
>  
>
> following are the console error logs:
>
> Severity: [notice][Client10.50.5.79]admserv_host_ip_check
> ap_get_remote_host could not resolve 10.50.5.79 <http://10.50.5.79>
>
>
>
> Severity: [notice][Client10.50.5.79]admserv_host_ip_check
> host [piquant] did not match pattern [*.localdomain] -will scan aliases
>
>
> Severity: [notice][Client10.50.5.79]admserv_host_ip_check
> ap_get_remote_host could not resolve 10.50.5.79 <http://10.50.5.79>, 
> referer:http://10.50.5.91:17881/admin-serv/tasks/configuration/HTMLAdmin?op=status
>
>
> Severity: [notice][Client10.50.5.79]admserv_host_ip_check
> ap_get_remote_host could not resolve 127.0.0.1 <http://127.0.0.1>
>
>
> windows host IP is 10.50.5.89 <http://10.50.5.89> (logs showing 
> 10.50.5.79 <http://10.50.5.79>, i dont how that happens)
> VM IP is 10.50.5.91 <http://10.50.5.91>
>  
> help appreciated.
> Thanks
> Vivek
>
> On Feb 7, 2008 2:36 PM, Rich Megginson <rmeggins at redhat.com 
> <mailto:rmeggins at redhat.com>> wrote:
>
>     Anand Vaddarapu wrote:
>     > Hi,
>     >
>     >  I can start both dirsrv and dirsrv-admin as well. i can login into
>     > console from local host but can not login from remote host. any
>     ideas?
>     > Thanks
>     fedora-idm-console -D 9 -f console.log
>
>     Any clues in console.log?
>     >
>     > On Feb 7, 2008 1:42 PM, Rich Megginson <rmeggins at redhat.com
>     <mailto:rmeggins at redhat.com>
>     > <mailto:rmeggins at redhat.com <mailto:rmeggins at redhat.com>>> wrote:
>     >
>     >     Anand Vaddarapu wrote:
>     >     > Hi,
>     >     >
>     >     >  I installed with the setupssl2.sh script. with password
>     file i can
>     >     > able to restart dirsrv.
>     >     But you were having a problem with dirsrv-admin?
>     >     > is it allowed to login into console more than 1 location after
>     >     > enabling SSL?
>     >     Not sure what you mean.  Is something not working correctly?
>     >     > Thanks
>     >     > Vivek
>     >     >
>     >     > On Feb 7, 2008 1:18 AM, Rich Megginson
>     <rmeggins at redhat.com <mailto:rmeggins at redhat.com>
>     >     <mailto:rmeggins at redhat.com <mailto:rmeggins at redhat.com>>
>     >     > <mailto:rmeggins at redhat.com <mailto:rmeggins at redhat.com>
>     <mailto:rmeggins at redhat.com <mailto:rmeggins at redhat.com>>>> wrote:
>     >     >
>     >     >     Anand Vaddarapu wrote:
>     >     >     > Hi,
>     >     >     >
>     >     >     > Restarted my FDS as soon as enable SSL service. I try to
>     >     >     restarted my
>     >     >     > dirsrv-admin, its promt me for password. When i
>     enter valid
>     >     >     password ,
>     >     >     > the error mesg appers saying "incorrect password". I m
>     >     damn sure
>     >     >     that
>     >     >     > entered password was correct. When it happened to me
>     first
>     >     time i
>     >     >     > tought i forgot password and reinstall the FDS.
>     Again happened
>     >     >     second
>     >     >     > time. Please let me know how can i recover password
>     or any
>     >     >     alternative
>     >     >     > way to restart my dirsrv-admin.
>     >     >     Did you see this?
>     >     >
>     >    
>     http://directory.fedoraproject.org/wiki/Howto:SSL#Admin_Server_SSL_Information
>     >     >
>     >     >     How did you configure SSL for the Admin Server?  If you
>     >     created a
>     >     >     cert/key for the Admin Server, you must have given a
>     >     password when you
>     >     >     imported the key/cert.  If you used the setupssl2.sh
>     script (or
>     >     >     setupssl.sh if you are using Fedora DS 1.0.4) then it
>     >     created the
>     >     >     password.conf file for you.
>     >     >     >
>     >     >     > Thanks
>     >     >     > Vivek
>     >     >     >
>     >     >     >
>     >     >
>     >    
>     ------------------------------------------------------------------------
>     >     >     >
>     >     >     > --
>     >     >     > Fedora-directory-users mailing list
>     >     >     > Fedora-directory-users at redhat.com
>     <mailto:Fedora-directory-users at redhat.com>
>     >     <mailto:Fedora-directory-users at redhat.com
>     <mailto:Fedora-directory-users at redhat.com>>
>     >     >     <mailto:Fedora-directory-users at redhat.com
>     <mailto:Fedora-directory-users at redhat.com>
>     >     <mailto:Fedora-directory-users at redhat.com
>     <mailto:Fedora-directory-users at redhat.com>>>
>     >     >     >
>     https://www.redhat.com/mailman/listinfo/fedora-directory-users
>     >     >     >
>     >     >
>     >     >
>     >     >     --
>     >     >     Fedora-directory-users mailing list
>     >     >     Fedora-directory-users at redhat.com
>     <mailto:Fedora-directory-users at redhat.com>
>     >     <mailto:Fedora-directory-users at redhat.com
>     <mailto:Fedora-directory-users at redhat.com>>
>     >     >     <mailto:Fedora-directory-users at redhat.com
>     <mailto:Fedora-directory-users at redhat.com>
>     >     <mailto:Fedora-directory-users at redhat.com
>     <mailto:Fedora-directory-users at redhat.com>>>
>     >     >    
>     https://www.redhat.com/mailman/listinfo/fedora-directory-users
>     >     >
>     >     >
>     >     >
>     >    
>     ------------------------------------------------------------------------
>     >     >
>     >     > --
>     >     > Fedora-directory-users mailing list
>     >     > Fedora-directory-users at redhat.com
>     <mailto:Fedora-directory-users at redhat.com>
>     >     <mailto:Fedora-directory-users at redhat.com
>     <mailto:Fedora-directory-users at redhat.com>>
>     >     > https://www.redhat.com/mailman/listinfo/fedora-directory-users
>     >     >
>     >
>     >
>     >     --
>     >     Fedora-directory-users mailing list
>     >     Fedora-directory-users at redhat.com
>     <mailto:Fedora-directory-users at redhat.com>
>     >     <mailto:Fedora-directory-users at redhat.com
>     <mailto:Fedora-directory-users at redhat.com>>
>     >     https://www.redhat.com/mailman/listinfo/fedora-directory-users
>     >
>     >
>     >
>     ------------------------------------------------------------------------
>     >
>     > --
>     > Fedora-directory-users mailing list
>     > Fedora-directory-users at redhat.com
>     <mailto:Fedora-directory-users at redhat.com>
>     > https://www.redhat.com/mailman/listinfo/fedora-directory-users
>     >
>
>
>     --
>     Fedora-directory-users mailing list
>     Fedora-directory-users at redhat.com
>     <mailto:Fedora-directory-users at redhat.com>
>     https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
>
> ------------------------------------------------------------------------
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>   

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.fedoraproject.org/pipermail/389-users/attachments/20080207/0606ee89/attachment.bin>


More information about the 389-users mailing list