Re: Unable to connect to Admin server via 389 windows console

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 

Could you please double check your Directory Server is configured with SSLv3 disabled?
http://www.port389.org/docs/389ds/howto/howto-disable-sslv3.html

On 03/02/2016 01:35 PM, Daniel Franciscus wrote:
OK, new error now after upgrading:

Unable to create ssl socket
org.mozilla.jss.ssl.SSLSocketException: SSL_ForceHandshake failed: (-12279) Peer using unsupported version of security protocol.
at org.mozilla.jss.ssl.SSLSocket.forceHandshake(Native Method)
at com.netscape.management.client.comm.HttpsChannel.open(Unknown Source)
at com.netscape.management.client.comm.CommManager.send(Unknown Source)
at com.netscape.management.client.comm.HttpManager.get(Unknown Source)
at com.netscape.management.client.console.Console.invoke_task(Unknown Source)
at com.netscape.management.client.console.Console.authenticate_user(Unknown Source)
at com.netscape.management.client.console.Console.<init>(Unknown Source)
at com.netscape.management.client.console.Console.main(Unknown Source)
JButtonFactory: button width = 54
JButtonFactory: button height = 20
JButtonFactory: button width = 54
JButtonFactory: button height = 20
JButtonFactory: button width = 54
JButtonFactory: button height = 20
JButtonFactory: button width = 54
JButtonFactory: button height = 20



Dan Franciscus

Systems Administrator

Information Technology Group

Institute for Advanced Study

609-734-8138



From: "Mark Reynolds" <mareynol@xxxxxxxxxx>
To: "General discussion list for the 389 Directory server project." <389-users@xxxxxxxxxxxxxxxxxxxxxxx>, mreynolds@xxxxxxxxxx
Sent: Wednesday, March 2, 2016 11:03:21 AM
Subject: [389-users] Re: Unable to connect to Admin server via 389 windows console



On 03/02/2016 08:29 AM, Daniel Franciscus wrote:
C:\Program Files\389 Management Console>"java" "-Djava.library.path=." -cp "./jss4.jar;./ldapjdk.jar;./idm-console-base.jar;./idm-console-mcc.jar;./idm-console-mcc_en.jar;./idm-console-nmclf.jar;./idm-console-nmclf_en.jar;./389-console_en.jar" -Djava.util.prefs.systemRo
ot=I:\/.389-console -Djava.util.prefs.userRoot=I:\/.389-console -Djava.net.preferIPv4Stack=true com.netscape.management.client.console.Console -D 9
java.util.prefs.userRoot=I:\/.389-console
java.runtime.name=Java(TM) SE Runtime Environment
sun.boot.library.path=C:\Program Files\Java\jre7\bin
java.vm.version=23.5-b02
java.vm.vendor=Oracle Corporation
java.vendor.url="" moz-do-not-send="true" class="moz-txt-link-freetext" href="http://java.oracle.com/" target="_blank">http://java.oracle.com/
path.separator=;
java.vm.name=Java HotSpot(TM) 64-Bit Server VM
file.encoding.pkg=sun.io
user.country=US
user.script=
sun.java.launcher=SUN_STANDARD
sun.os.patch.level=
java.vm.specification.name=Java Virtual Machine Specification
user.dir=C:\Program Files\389 Management Console
java.runtime.version=1.7.0_09-b05
java.awt.graphicsenv=sun.awt.Win32GraphicsEnvironment
java.endorsed.dirs=C:\Program Files\Java\jre7\lib\endorsed
os.arch=amd64
java.io.tmpdir=C:\Users\hermes\AppData\Local\Temp\
line.separator=

java.vm.specification.vendor=Oracle Corporation
user.variant=
os.name=Windows Server 2012
sun.jnu.encoding=Cp1252
java.library.path=.
java.specification.name=Java Platform API Specification
java.class.version=51.0
java.net.preferIPv4Stack=true
sun.management.compiler=HotSpot 64-Bit Tiered Compilers
os.version=6.2
user.home=C:\Users\hermes
user.timezone=America/New_York
java.awt.printerjob=sun.awt.windows.WPrinterJob
file.encoding=Cp1252
java.specification.version=1.7
java.class.path=./jss4.jar;./ldapjdk.jar;./idm-console-base.jar;./idm-console-mcc.jar;./idm-console-mcc_en.jar;./idm-console-nmclf.jar;./idm-console-nmclf_en.jar;./389-console_en.jar
user.name=hermes
java.vm.specification.version=1.7
sun.java.command=com.netscape.management.client.console.Console -D 9
java.home=C:\Program Files\Java\jre7
sun.arch.data.model=64
java.util.prefs.systemRoot=I:\/.389-console
user.language=en
java.specification.vendor=Oracle Corporation
awt.toolkit=sun.awt.windows.WToolkit
java.vm.info=mixed mode
java.version=1.7.0_09
java.ext.dirs=C:\Program Files\Java\jre7\lib\ext;C:\Windows\Sun\Java\lib\ext
sun.boot.class.path=C:\Program Files\Java\jre7\lib\resources.jar;C:\Program Files\Java\jre7\lib\rt.jar;C:\Program Files\Java\jre7\lib\sunrsasign.jar;C:\Program Files\Java\jre7\lib\jsse.jar;C:\Program Files\Java\jre7\lib\jce.jar;C:\Program Files\Java\jre7\lib\charsets.ja
r;C:\Program Files\Java\jre7\lib\jfr.jar;C:\Program Files\Java\jre7\classes
java.vendor=Oracle Corporation
file.separator=\
java.vendor.url.bug=http://bugreport.sun.com/bugreport/
sun.io.unicode.encoding=UnicodeLittle
sun.cpu.endian=little
sun.desktop=windows
sun.cpu.isalist=amd64
389-Management-Console/1.1.14 B2015.147.2124

You are not on the latest software.  The latest is 1.1.15 which fixes the ssl connection issues:

389 Windows Console 1.1.15

The 389 Directory Server team is proud to announce 389-console-win version 1.1.15.

Windows installers are available to download from Download 389 Windows Console (32-bit) and Download 389 Windows Console (64-bit).

Highlights in 389-console-win-1.1.15

  • Windows Console now has the same bug fixes and enhancements made for the Fedora 389-console.
  • A connection failure problem over SSL/startTLS was fixed.


Please download it.


RemoteImage: NOT found in cache loader447561888:com/netscape/management/nmclf/icons/Error.gif
RemoteImage: Create RemoteImage cache for loader447561888
RemoteImage: NOT found in cache loader447561888:com/netscape/management/nmclf/icons/Inform.gif
RemoteImage: NOT found in cache loader447561888:com/netscape/management/nmclf/icons/Warn.gif
RemoteImage: NOT found in cache loader447561888:com/netscape/management/nmclf/icons/Question.gif
ResourceSet: NOT found in cache loader447561888:com.netscape.management.client.components.components
RemoteImage: NOT found in cache loader447561888:com/netscape/management/client/theme/images/logo16.gif
RemoteImage: NOT found in cache loader447561888:com/netscape/management/client/theme/images/login.gif
ResourceSet: NOT found in cache loader447561888:com.netscape.management.client.util.default
ResourceSet: found in cache loader447561888:com.netscape.management.client.util.default
JButtonFactory: button width = 54
JButtonFactory: button height = 20
JButtonFactory: button width = 54
JButtonFactory: button height = 20
JButtonFactory: button width = 72
JButtonFactory: button height = 20
JButtonFactory: button width = 72
JButtonFactory: button height = 20
JButtonFactory: button width = 72
JButtonFactory: button height = 20
JButtonFactory: button width = 72
JButtonFactory: button height = 20
JButtonFactory: button width = 54
JButtonFactory: button height = 20
JButtonFactory: button width = 72
JButtonFactory: button width = 72
CommManager> New CommRecord (https://server:9830/admin-serv/authenticate)
ResourceSet: found in cache loader447561888:com.netscape.management.client.theme.theme
ResourceSet: NOT found in cache loader447561888:com.netscape.management.client.comm.HttpsChannel
CREATE JSS SSLSocket
Exception in thread "main" java.lang.UnsatisfiedLinkError: org.mozilla.jss.ssl.SSLSocket.setSSLVersionRangeDefault(III)V
at org.mozilla.jss.ssl.SSLSocket.setSSLVersionRangeDefault(Native Method)
at org.mozilla.jss.ssl.SSLSocket.setSSLVersionRangeDefault(SSLSocket.java:1001)
at com.netscape.management.client.comm.HttpsChannel.open(Unknown Source)
at com.netscape.management.client.comm.CommManager.send(Unknown Source)
at com.netscape.management.client.comm.HttpManager.get(Unknown Source)
at com.netscape.management.client.console.Console.invoke_task(Unknown Source)
at com.netscape.management.client.console.Console.authenticate_user(Unknown Source)
at com.netscape.management.client.console.Console.<init>(Unknown Source)
at com.netscape.management.client.console.Console.main(Unknown Source)




Dan Franciscus

Systems Administrator

Information Technology Group

Institute for Advanced Study

609-734-8138



From: "Mark Reynolds" <mareynol@xxxxxxxxxx>
To: "General discussion list for the 389 Directory server project." <389-users@xxxxxxxxxxxxxxxxxxxxxxx>
Sent: Tuesday, March 1, 2016 1:27:49 PM
Subject: [389-users] Re: Unable to connect to Admin server via 389 windows console

Please run the console in debug mode and post the entire output:

389-console -D 9



On 03/01/2016 01:02 PM, Daniel Franciscus wrote:
We are using SSL, and I am using the latest software.






Dan Franciscus

Systems Administrator

Information Technology Group

Institute for Advanced Study

609-734-8138



From: "Mark Reynolds" <mareynol@xxxxxxxxxx>
To: "General discussion list for the 389 Directory server project." <389-users@xxxxxxxxxxxxxxxxxxxxxxx>
Sent: Tuesday, March 1, 2016 10:58:16 AM
Subject: [389-users] Re: Unable to connect to Admin server via 389 windows console

Are you using SSL in the Admin Server?  If so, you should use the latest console for Windows:



=======================================================================

389 Windows Console 1.1.15

The 389 Directory Server team is proud to announce 389-console-win version 1.1.15.

Windows installers are available to download from Download 389 Windows Console (32-bit) and Download 389 Windows Console (64-bit).

Highlights in 389-console-win-1.1.15

  • Windows Console now has the same bug fixes and enhancements made for the Fedora 389-console.
  • A connection failure problem over SSL/startTLS was fixed.
...
...
==========================================================================

Mark


On 03/01/2016 10:02 AM, Daniel Franciscus wrote:
Hello,

I am having an issue connecting to our 389 server, but only from windows servers it seems. It works fine on a Windows 7 workstation. 

What I have checked:
  • Verified connectivity to port 9830
  • Verified java version 7.0.90 installed and in the Path environment variable
  • Can ping the hostname of the 389 server
  • Tested on two Windows Server 2012 R2 servers
I get the error: Cannot connect to the Admin server "<server name>" The URL is not correct or the server is not running.






Dan Franciscus

Systems Administrator

Information Technology Group

Institute for Advanced Study

609-734-8138




--
389 users mailing list
389-users@%(host_name)s
http://lists.fedoraproject.org/admin/lists/389-users@xxxxxxxxxxxxxxxxxxxxxxx


--
389 users mailing list
389-users@%(host_name)s
http://lists.fedoraproject.org/admin/lists/389-users@xxxxxxxxxxxxxxxxxxxxxxx


--
389 users mailing list
389-users@%(host_name)s
http://lists.fedoraproject.org/admin/lists/389-users@xxxxxxxxxxxxxxxxxxxxxxx


--
389 users mailing list
389-users@%(host_name)s
http://lists.fedoraproject.org/admin/lists/389-users@xxxxxxxxxxxxxxxxxxxxxxx


--
389 users mailing list
389-users@%(host_name)s
http://lists.fedoraproject.org/admin/lists/389-users@xxxxxxxxxxxxxxxxxxxxxxx


--
389 users mailing list
389-users@%(host_name)s
http://lists.fedoraproject.org/admin/lists/389-users@xxxxxxxxxxxxxxxxxxxxxxx


--
389 users mailing list
389-users@%(host_name)s
http://lists.fedoraproject.org/admin/lists/389-users@xxxxxxxxxxxxxxxxxxxxxxx

--
389 users mailing list
389-users@%(host_name)s
http://lists.fedoraproject.org/admin/lists/389-users@xxxxxxxxxxxxxxxxxxxxxxx
[Index of Archives]     [Fedora User Discussion]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [Fedora News]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Maintainers]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [Fedora Fonts]     [ATA RAID]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora QA]     [Fedora Triage]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Tux]     [Yosemite News]     [Yosemite Photos]     [Linux Apps]     [Maemo Users]     [Gnome Users]     [KDE Users]     [Fedora Tools]     [Fedora Art]     [Fedora Docs]     [Maemo Users]     [Asterisk PBX]     [Fedora Sparc]     [Fedora Universal Network Connector]     [Fedora ARM]

  Powered by Linux