Re: Unable to connect to Admin server via 389 windows console

[Daniel Franciscus <dfrancis@xxxxxxx>]

For the record it seemed like the fix for this was installing Firefox x86 version. I only had the 64-bit version installed.

Dan Franciscus

Systems Administrator

Information Technology Group

Institute for Advanced Study

609-734-8138

---

From: "Noriko Hosoi" <nhosoi@xxxxxxxxxx>
To: 389-users@xxxxxxxxxxxxxxxxxxxxxxx
Sent: Thursday, March 3, 2016 3:17:16 PM
Subject: [389-users] Re: Unable to connect to Admin server via 389 windows console

On 03/03/2016 11:58 AM, Daniel Franciscus wrote:

SSL3 is disabled. SSL2 is the preferred and then TLS.

Is SSLv2 is enabled on your server?  It should be completely disabled.

What is the version of your server?
$ rpm -q 389-ds-base

Please note that SSL v3 was disabled since 1.3.3.6-1.
    - Ticket 47928 - Disable SSL v3, by default.

And so is in the Windows Console.

What does your cn=encryption,cn=config entry look?

Thanks.

Dan Franciscus

Systems Administrator

Information Technology Group

Institute for Advanced Study

609-734-8138

---

From: "Noriko Hosoi" <nhosoi@xxxxxxxxxx>
To: 389-users@xxxxxxxxxxxxxxxxxxxxxxx
Sent: Wednesday, March 2, 2016 5:03:56 PM
Subject: [389-users] Re: Unable to connect to Admin server via 389 windows console

Could you please double check your Directory Server is configured with SSLv3 disabled?
http://www.port389.org/docs/389ds/howto/howto-disable-sslv3.html

On 03/02/2016 01:35 PM, Daniel Franciscus wrote:

OK, new error now after upgrading:

Unable to create ssl socket
org.mozilla.jss.ssl.SSLSocketException: SSL_ForceHandshake failed: (-12279) Peer using unsupported version of security protocol.
at org.mozilla.jss.ssl.SSLSocket.forceHandshake(Native Method)
at com.netscape.management.client.comm.HttpsChannel.open(Unknown Source)
at com.netscape.management.client.comm.CommManager.send(Unknown Source)
at com.netscape.management.client.comm.HttpManager.get(Unknown Source)
at com.netscape.management.client.console.Console.invoke_task(Unknown Source)
at com.netscape.management.client.console.Console.authenticate_user(Unknown Source)
at com.netscape.management.client.console.Console.<init>(Unknown Source)
at com.netscape.management.client.console.Console.main(Unknown Source)
JButtonFactory: button width = 54
JButtonFactory: button height = 20
JButtonFactory: button width = 54
JButtonFactory: button height = 20
JButtonFactory: button width = 54
JButtonFactory: button height = 20
JButtonFactory: button width = 54
JButtonFactory: button height = 20

Dan Franciscus

Systems Administrator

Information Technology Group

Institute for Advanced Study

609-734-8138

--
389 users mailing list
389-users@%(host_name)s
http://lists.fedoraproject.org/admin/lists/389-users@xxxxxxxxxxxxxxxxxxxxxxx

--
389 users mailing list
389-users@%(host_name)s
http://lists.fedoraproject.org/admin/lists/389-users@xxxxxxxxxxxxxxxxxxxxxxx