Random failures on startTLS

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Aaron,

I read thru the e-mail chain but perhaps I missed it.  What exactly is the
issue you are having regarding startTLS, ABANDON request and 389 Directory?
Is it causing some unexpected behavior?

I too use startTLS in my JNDI client but I don't recall seeing anything that
you are experiencing except the persistent search that Rich was talking
about.

FYI (For your information), I narrowed down what triggers an ABANDON request
within JNDI for persistent search by tracing the JNDI code that came as part
of OpenJDK.

- David

2010/4/15 Aaron Hagopian <airhead1 at gmail.com>

> I am having a hard time programmatically getting the ABANDON requests to
> show up.  In my local environment I cannot reproduce at all (Fedora 12
> x86_64) but on all our server environments I see these in the logs.  The
> oddest thing about it is I only see these when running in tomcat on either
> our CentOS or RHEL  machines (i386 and x86_64 platforms).  Running a
> standalone java program does not create the ABANDON requests, only in
> tomcat.  A little research shows that tomcat does have its own
> implementation of JNDI but that doesn't then explain why in my local
> environment (running same versions of java/tomcat/389ds) this does not
> happen.    I will try to find any further relevant differences between my
> local environment and the servers where the messages show up.
>
> For now we are just going SSL all the time on our connections which seems
> to fix the problem since we no longer need the startTLS.
>
>
> On Wed, Apr 14, 2010 at 5:57 PM, Rich Megginson <rmeggins at redhat.com>wrote:
>
>> Aaron Hagopian wrote:
>> >
>> >
>> >     It's JNDI itself.  JNDI uses ABANDON requests.  Are you using
>> >     persistent
>> >     search at all?  Another 389 user reported similar problems caused by
>> >     improper handling of JNDI persistent searches + ABANDON requests.
>> >     Although this looks different, both issues have JNDI and ABANDON
>> >     in common.
>> >
>> >
>> > We are not using persistent search at all.  I will try to track down
>> > what in our code creates the ABANDON requests but might take me a bit.
>> I think it's JNDI itself - you probably won't find anything explicitly
>> calling an ABANDON request in your code.
>> >  Once successfull I'll get you something that causes the ABANDON to
>> > show up followed by a startTLS.
>> > ------------------------------------------------------------------------
>> >
>> > --
>> > 389 users mailing list
>> > 389-users at lists.fedoraproject.org
>> > https://admin.fedoraproject.org/mailman/listinfo/389-users
>>
>> --
>> 389 users mailing list
>> 389-users at lists.fedoraproject.org
>> https://admin.fedoraproject.org/mailman/listinfo/389-users
>>
>
>
> --
> 389 users mailing list
> 389-users at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/389-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.fedoraproject.org/pipermail/389-users/attachments/20100416/a9a36f4c/attachment.html 


[Index of Archives]     [Fedora User Discussion]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [Fedora News]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Maintainers]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [Fedora Fonts]     [ATA RAID]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora QA]     [Fedora Triage]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Tux]     [Yosemite News]     [Yosemite Photos]     [Linux Apps]     [Maemo Users]     [Gnome Users]     [KDE Users]     [Fedora Tools]     [Fedora Art]     [Fedora Docs]     [Maemo Users]     [Asterisk PBX]     [Fedora Sparc]     [Fedora Universal Network Connector]     [Fedora ARM]

  Powered by Linux