Re: Remote Management Console doesn't show "Directory Server" entry anymore

wodel youchi <wodel.youchi@xxxxxxxxx> · Thu, 29 Sep 2016 22:53:26 +0100

Hi, and thanks for your responses.

I did the test with both localhost and the Windows station, and here are the results

1- localhost 

using : /usr/bin/389-console -a http://localhost:9830 to launch the console

Logged as cn=Directory Manager

[29/Sep/2016:20:41:59 +0100] conn=7219 op=0 BIND dn="cn=Directory Manager" method=128 version=3
[29/Sep/2016:20:41:59 +0100] conn=7219 op=0 RESULT err=0 tag=97 nentries=0 etime=0 dn="cn=directory manager"
[29/Sep/2016:20:41:59 +0100] conn=7219 op=1 SRCH base="cn=user,cn=DefaultObjectClassesContainer,ou=1.1,ou=admin,ou=Global Preferences,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL
[29/Sep/2016:20:41:59 +0100] conn=7219 op=1 RESULT err=0 tag=101 nentries=1 etime=0
...
[29/Sep/2016:20:42:22 +0100] conn=7219 op=46 SRCH base="cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=1 filter="(objectClass=nsApplication)" attrs=ALL
[29/Sep/2016:20:42:22 +0100] conn=7219 op=46 SORT cn (2)
[29/Sep/2016:20:42:22 +0100] conn=7219 op=46 RESULT err=0 tag=101 nentries=2 etime=0

[29/Sep/2016:20:42:22 +0100] conn=7219 op=47 SRCH base="cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=1 filter="(objectClass=netscapeServer)" attrs=ALL
[29/Sep/2016:20:42:22 +0100] conn=7219 op=47 SORT cn (2)
[29/Sep/2016:20:42:22 +0100] conn=7219 op=47 RESULT err=0 tag=101 nentries=1 etime=0
[29/Sep/2016:20:42:22 +0100] conn=7219 op=48 SRCH base="cn=configuration,cn=admin-serv-idm01,cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL
[29/Sep/2016:20:42:22 +0100] conn=7219 op=48 RESULT err=0 tag=101 nentries=1 etime=0
[29/Sep/2016:20:42:22 +0100] conn=7219 op=49 SRCH base="cn=configuration,cn=admin-serv-idm01,cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL
[29/Sep/2016:20:42:22 +0100] conn=7219 op=49 RESULT err=0 tag=101 nentries=1 etime=0
[29/Sep/2016:20:42:22 +0100] conn=7219 op=50 SRCH base="cn=configuration,cn=admin-serv-idm01,cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL
[29/Sep/2016:20:42:22 +0100] conn=7219 op=50 RESULT err=0 tag=101 nentries=1 etime=0
[29/Sep/2016:20:42:22 +0100] conn=7219 op=51 SRCH base="cn=admin-serv-idm01,cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL
[29/Sep/2016:20:42:22 +0100] conn=7219 op=51 RESULT err=0 tag=101 nentries=1 etime=0
[29/Sep/2016:20:42:22 +0100] conn=7219 op=52 SRCH base="cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL
[29/Sep/2016:20:42:22 +0100] conn=7219 op=52 RESULT err=0 tag=101 nentries=1 etime=0
[29/Sep/2016:20:42:22 +0100] conn=7219 op=53 SRCH base="cn=ResourceEditorExtension,ou=1.1,ou=admin,ou=Global Preferences,ou=mydomain.tld,o=NetscapeRoot" scope=1 filter="(objectClass=nsAdminResourceEditorExtension)" attrs=ALL
[29/Sep/2016:20:42:22 +0100] conn=7219 op=53 RESULT err=0 tag=101 nentries=6 etime=0
[29/Sep/2016:20:42:22 +0100] conn=7219 op=54 SRCH base="cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=1 filter="(objectClass=netscapeServer)" attrs=ALL
[29/Sep/2016:20:42:22 +0100] conn=7219 op=54 SORT cn (2)
[29/Sep/2016:20:42:22 +0100] conn=7219 op=54 RESULT err=0 tag=101 nentries=1 etime=0
[29/Sep/2016:20:42:22 +0100] conn=7219 op=55 SRCH base="cn=configuration,cn=slapd-idm01,cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL
[29/Sep/2016:20:42:22 +0100] conn=7219 op=55 RESULT err=0 tag=101 nentries=1 etime=0
[29/Sep/2016:20:42:22 +0100] conn=7219 op=56 SRCH base="cn=configuration,cn=slapd-idm01,cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL
[29/Sep/2016:20:42:22 +0100] conn=7219 op=56 RESULT err=0 tag=101 nentries=1 etime=0
[29/Sep/2016:20:42:22 +0100] conn=7219 op=57 SRCH base="cn=configuration,cn=slapd-idm01,cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL
[29/Sep/2016:20:42:22 +0100] conn=7219 op=57 RESULT err=0 tag=101 nentries=1 etime=0
[29/Sep/2016:20:42:22 +0100] conn=7219 op=58 SRCH base="ou=Console,ou=cn\3DDirectory Manager,ou=UserPreferences,ou=mydomain.tld,o=NetscapeRoot" scope=2 filter="(objectClass=*)" attrs=ALL
[29/Sep/2016:20:42:22 +0100] conn=7219 op=58 RESULT err=0 tag=101 nentries=12 etime=0 notes=U
[29/Sep/2016:20:42:22 +0100] conn=7219 op=59 SRCH base="ou=1.1.14,ou=Console,ou=cn\3DDirectory Manager,ou=UserPreferences,ou=mydomain.tld,o=NetscapeRoot" scope=2 filter="(objectClass=*)" attrs=ALL
[29/Sep/2016:20:42:22 +0100] conn=7219 op=59 RESULT err=0 tag=101 nentries=5 etime=0 notes=U
[29/Sep/2016:20:42:22 +0100] conn=7219 op=60 SRCH base="cn=DS_MISCELLANEOUS,ou=1.1.14,ou=Console,ou=cn\3DDirectory Manager,ou=UserPreferences,ou=mydomain.tld,o=NetscapeRoot" scope=2 filter="(objectClass=*)" attrs=ALL
[29/Sep/2016:20:42:22 +0100] conn=7219 op=60 RESULT err=0 tag=101 nentries=1 etime=0 notes=U
[29/Sep/2016:20:42:22 +0100] conn=7219 op=61 SRCH base="cn=DS_MISCELLANEOUS,ou=1.1.14,ou=Console,ou=cn\3DDirectory Manager,ou=UserPreferences,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs="nsPreference"
[29/Sep/2016:20:42:22 +0100] conn=7219 op=61 RESULT err=0 tag=101 nentries=1 etime=0
[29/Sep/2016:20:42:22 +0100] conn=7219 op=62 SRCH base="cn=slapd-idm01,cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL
[29/Sep/2016:20:42:22 +0100] conn=7219 op=62 RESULT err=0 tag=101 nentries=1 etime=0
[29/Sep/2016:20:42:22 +0100] conn=7219 op=63 SRCH base="o=NetscapeRoot" scope=2 filter="(uid=*)" attrs="uid"
[29/Sep/2016:20:42:22 +0100] conn=7219 op=63 RESULT err=0 tag=101 nentries=1 etime=0 notes=U
[29/Sep/2016:20:42:23 +0100] conn=7219 op=64 SRCH base="cn=slapd-idm01,cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL
[29/Sep/2016:20:42:23 +0100] conn=7219 op=64 RESULT err=0 tag=101 nentries=1 etime=0
[29/Sep/2016:20:42:23 +0100] conn=7219 op=65 SRCH base="cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL
[29/Sep/2016:20:42:23 +0100] conn=7219 op=65 RESULT err=0 tag=101 nentries=1 etime=0
[29/Sep/2016:20:42:23 +0100] conn=7219 op=66 SRCH base="cn=ResourceEditorExtension,ou=1.1,ou=admin,ou=Global Preferences,ou=mydomain.tld,o=NetscapeRoot" scope=1 filter="(objectClass=nsAdminResourceEditorExtension)" attrs=ALL
[29/Sep/2016:20:42:23 +0100] conn=7219 op=66 RESULT err=0 tag=101 nentries=6 etime=0

2- Windows station
logged as cn=Directory Manager with url : http://idm01.mydomaine.tld:9830
389-Console for Windows version 1.1.15

[29/Sep/2016:20:34:38 +0100] conn=6821 fd=65 slot=65 connection from 192.168.104.16 to 172.16.16.12
[29/Sep/2016:20:34:38 +0100] conn=6821 op=0 BIND dn="cn=Directory Manager" method=128 version=3
[29/Sep/2016:20:34:38 +0100] conn=6821 op=0 RESULT err=0 tag=97 nentries=0 etime=0 dn="cn=directory manager"
...
[29/Sep/2016:20:34:46 +0100] conn=6821 op=46 SRCH base="cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=1 filter="(objectClass=nsApplication)" attrs=ALL
[29/Sep/2016:20:34:46 +0100] conn=6821 op=46 SORT cn (2)
[29/Sep/2016:20:34:46 +0100] conn=6821 op=46 RESULT err=0 tag=101 nentries=2 etime=0
[29/Sep/2016:20:34:46 +0100] conn=6821 op=47 SRCH base="cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=1 filter="(objectClass=netscapeServer)" attrs=ALL
[29/Sep/2016:20:34:46 +0100] conn=6821 op=47 SORT cn (2)
[29/Sep/2016:20:34:46 +0100] conn=6821 op=47 RESULT err=0 tag=101 nentries=1 etime=0
[29/Sep/2016:20:34:47 +0100] conn=6821 op=48 SRCH base="cn=configuration,cn=admin-serv-idm01,cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL
[29/Sep/2016:20:34:47 +0100] conn=6821 op=48 RESULT err=0 tag=101 nentries=1 etime=0
[29/Sep/2016:20:34:47 +0100] conn=6821 op=49 SRCH base="cn=configuration,cn=admin-serv-idm01,cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL
[29/Sep/2016:20:34:47 +0100] conn=6821 op=49 RESULT err=0 tag=101 nentries=1 etime=0
[29/Sep/2016:20:34:47 +0100] conn=6821 op=50 SRCH base="cn=configuration,cn=admin-serv-idm01,cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL
[29/Sep/2016:20:34:47 +0100] conn=6821 op=50 RESULT err=0 tag=101 nentries=1 etime=0
[29/Sep/2016:20:34:47 +0100] conn=6821 op=51 SRCH base="cn=admin-serv-idm01,cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL
[29/Sep/2016:20:34:47 +0100] conn=6821 op=51 RESULT err=0 tag=101 nentries=1 etime=0
[29/Sep/2016:20:34:47 +0100] conn=6821 op=52 SRCH base="cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL
[29/Sep/2016:20:34:47 +0100] conn=6821 op=52 RESULT err=0 tag=101 nentries=1 etime=0
[29/Sep/2016:20:34:47 +0100] conn=6821 op=53 SRCH base="cn=ResourceEditorExtension,ou=1.1,ou=admin,ou=Global Preferences,ou=mydomain.tld,o=NetscapeRoot" scope=1 filter="(objectClass=nsAdminResourceEditorExtension)" attrs=ALL
[29/Sep/2016:20:34:47 +0100] conn=6821 op=53 RESULT err=0 tag=101 nentries=6 etime=0
[29/Sep/2016:20:34:47 +0100] conn=6821 op=54 SRCH base="cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=1 filter="(objectClass=netscapeServer)" attrs=ALL
[29/Sep/2016:20:34:47 +0100] conn=6821 op=54 SORT cn (2)
[29/Sep/2016:20:34:47 +0100] conn=6821 op=54 RESULT err=0 tag=101 nentries=1 etime=0
[29/Sep/2016:20:34:47 +0100] conn=6821 op=55 SRCH base="cn=configuration,cn=slapd-idm01,cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL
[29/Sep/2016:20:34:47 +0100] conn=6821 op=55 RESULT err=0 tag=101 nentries=1 etime=0
[29/Sep/2016:20:34:47 +0100] conn=6821 op=56 SRCH base="cn=configuration,cn=slapd-idm01,cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL
[29/Sep/2016:20:34:47 +0100] conn=6821 op=56 RESULT err=0 tag=101 nentries=1 etime=0
[29/Sep/2016:20:34:47 +0100] conn=6821 op=57 SRCH base="cn=configuration,cn=slapd-idm01,cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL
[29/Sep/2016:20:34:47 +0100] conn=6821 op=57 RESULT err=0 tag=101 nentries=1 etime=0
[29/Sep/2016:20:34:47 +0100] conn=6821 op=58 SRCH base="ou=Console,ou=cn\3DDirectory Manager,ou=UserPreferences,ou=mydomain.tld,o=NetscapeRoot" scope=2 filter="(objectClass=*)" attrs=ALL
[29/Sep/2016:20:34:47 +0100] conn=6821 op=58 RESULT err=0 tag=101 nentries=12 etime=0 notes=U
[29/Sep/2016:20:34:47 +0100] conn=6821 op=59 SRCH base="ou=1.1.14,ou=Console,ou=cn\3DDirectory Manager,ou=UserPreferences,ou=mydomain.tld,o=NetscapeRoot" scope=2 filter="(objectClass=*)" attrs=ALL
[29/Sep/2016:20:34:47 +0100] conn=6821 op=59 RESULT err=0 tag=101 nentries=5 etime=0 notes=U
[29/Sep/2016:20:34:47 +0100] conn=6821 op=60 SRCH base="cn=DS_MISCELLANEOUS,ou=1.1.14,ou=Console,ou=cn\3DDirectory Manager,ou=UserPreferences,ou=mydomain.tld,o=NetscapeRoot" scope=2 filter="(objectClass=*)" attrs=ALL
[29/Sep/2016:20:34:47 +0100] conn=6821 op=60 RESULT err=0 tag=101 nentries=1 etime=0 notes=U
[29/Sep/2016:20:34:47 +0100] conn=6821 op=61 SRCH base="cn=DS_MISCELLANEOUS,ou=1.1.14,ou=Console,ou=cn\3DDirectory Manager,ou=UserPreferences,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs="nsPreference"
[29/Sep/2016:20:34:47 +0100] conn=6821 op=61 RESULT err=0 tag=101 nentries=1 etime=0
[29/Sep/2016:20:34:47 +0100] conn=6821 op=62 SRCH base="cn=slapd-idm01,cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL
[29/Sep/2016:20:34:47 +0100] conn=6821 op=62 RESULT err=0 tag=101 nentries=1 etime=0
[29/Sep/2016:20:34:47 +0100] conn=6821 op=63 SRCH base="o=NetscapeRoot" scope=2 filter="(uid=*)" attrs="uid"
[29/Sep/2016:20:34:47 +0100] conn=6821 op=63 RESULT err=0 tag=101 nentries=1 etime=0 notes=U

As you can see the two entries are detected on both connections, but on windows I can't see the Directory Server entry (see attachments).

Just to give more details.
The setup we have, is a master slave installation, I did the installation, but I don't manage the servers, there is another person who does.

I week ago, the problem begun, the weirder thing, is when we connect to the slave server from windows all is perfect, the problem is only with the master, and only remotely.

PS : on localhost, I also used  /usr/bin/389-console -a http://idm01.mydomaine.tld:9830 and it worked perfectly.

So where to look from here!!!

Regards.

2016-09-29 15:11 GMT+01:00 Mark Reynolds <mareynol@xxxxxxxxxx>:

    I've never heard of this happening.  What version of the windows
      console do you have?
    The only thing I can suggest for now is to compare the
      configuration DS's access log when you connect locally, and when
      you connect from the windows box.  

    For example on my test system (localhost.localdomain), where I
      use example.com as the admin domain, I see this in the access log
      when I open the server group folder in the console:

    ...

    ...

    ...

    [29/Sep/2016:09:54:24.467557360 -0400] conn=1 op=46 SRCH
    base="cn=Server
    Group,cn=localhost.localdomain,ou=example.com,o=NetscapeRoot"
    scope=1 filter="(objectClass=nsApplication)" attrs=ALL

    [29/Sep/2016:09:54:24.467703551 -0400] conn=1 op=46 SORT cn (2)

    [29/Sep/2016:09:54:24.467976746 -0400] conn=1 op=46 RESULT err=0
    tag=101 nentries=2 etime=0

    ...

    Two entries are returned (nentries): one for Admin Server and one
      for DS.  If you are correct, you would be seeing nentries=1 from
      the windows box session.

    So, start a "tail -f" on the DS access log of the Directory
      Server that has the o=netscaperoot suffix.  Note there is log
      buffering of 30 seconds.  Then log in to the console locally and
      check for this search in your "tail -f" output (you might have to
      wait 30 seconds for the buffering).  Keep the "tail -f" running,
      and then do the same thing after logging in from the windows box. 
      Are the results/nentries different?  Are you even seeing the
      connection/search?  Please post your access log output showing the
      two searches, like I did above.  

    Thanks,

    Mark

    On 09/29/2016 03:43 AM, wodel youchi
      wrote:

          Hi,

          Anyone?!!!

        Regards.

        2016-09-27 22:33 GMT+01:00 wodel youchi
          <wodel.youchi@xxxxxxxxx>:

              Hi,

              I am using 389DS on Centos7 x64

                [root@idm01 ~]# rpm -qa | grep 389

                389-admin-console-doc-1.1.10-1.el7.noarch

                389-console-1.1.9-1.el7.noarch

                389-adminutil-1.1.22-1.el7.x86_64

                389-admin-1.1.42-1.el7.x86_64

                389-ds-base-1.3.4.0-33.el7_2.x86_64

                389-ds-console-1.2.12-1.el7.noarch

                389-ds-base-libs-1.3.4.0-33.el7_2.x86_64

                389-admin-console-1.1.10-1.el7.noarch

                389-ds-console-doc-1.2.12-1.el7.noarch

              A week ago I started having a weird problem using the
                389DS's java management console remotely.

              If I connect locally with the console, I get the two
                entries of the directory server under server group :

              - Administration server

              - Directory server

              But when I use the console from another machine, a
                Windows machine with the management console installed on
                it, I get only the "Administration server" entry.

              So I cannot access the directory server to modify
                entries.

              I am using the 'Directoy Manager' to login to the
                console.

              I didn't find anything special on the error and
                access logs from neither the admin server no from the
                directory server.

              any idea where to search.

              Regards.

_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org

_______________________________________________

389-users mailing list -- 389-users@lists.fedoraproject.org

To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org

Attachment:
localhost.jpg

Description: JPEG image
Attachment:
windows.jpg

Description: JPEG image
_______________________________________________
389-users mailing list -- 389-users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to 389-users-leave@xxxxxxxxxxxxxxxxxxxxxxx