Remote Management Console doesn't show "Directory Server" entry anymore

List overview All Threads
Download

newer

older

Announcing Nunc-Stans 0.2.0

389 Directory Password Expiry...

wodel youchi

27 Sep 2016 27 Sep '16

11:33 p.m.

Hi,

I am using 389DS on Centos7 x64

A week ago I started having a weird problem using the 389DS's java management console remotely.

If I connect locally with the console, I get the two entries of the directory server under server group : - Administration server - Directory server

But when I use the console from another machine, a Windows machine with the management console installed on it, I get only the "Administration server" entry.

So I cannot access the directory server to modify entries. I am using the 'Directoy Manager' to login to the console.

I didn't find anything special on the error and access logs from neither the admin server no from the directory server.

any idea where to search.

Regards.

Attachments:

attachment.html (text/html — 1.3 KB)

Show replies by date

wodel youchi

29 Sep 29 Sep

9:43 a.m.

Hi,

Anyone?!!!

Regards.

2016-09-27 22:33 GMT+01:00 wodel youchi wodel.youchi@gmail.com:

...

Hi,

I am using 389DS on Centos7 x64

[root@idm01 ~]# rpm -qa | grep 389 389-admin-console-doc-1.1.10-1.el7.noarch 389-console-1.1.9-1.el7.noarch 389-adminutil-1.1.22-1.el7.x86_64 389-admin-1.1.42-1.el7.x86_64 389-ds-base-1.3.4.0-33.el7_2.x86_64 389-ds-console-1.2.12-1.el7.noarch 389-ds-base-libs-1.3.4.0-33.el7_2.x86_64 389-admin-console-1.1.10-1.el7.noarch 389-ds-console-doc-1.2.12-1.el7.noarch

A week ago I started having a weird problem using the 389DS's java management console remotely.

If I connect locally with the console, I get the two entries of the directory server under server group :

Administration server

Directory server

But when I use the console from another machine, a Windows machine with the management console installed on it, I get only the "Administration server" entry.

So I cannot access the directory server to modify entries. I am using the 'Directoy Manager' to login to the console.

I didn't find anything special on the error and access logs from neither the admin server no from the directory server.

any idea where to search.

Regards.

Kalchik, Jeffery

4:10 p.m.

New subject: Remote Management Console doesn't show "Directory Server" entry anymore

That’s my customary mode of operation, as a Java based X11 Window application does not perform well over a VPN connection here. In the several years I’ve been running this application (both HP-UX and now Linux/CentOS6,) I don’t recall seeing anything like this.

Are you absolutely sure that your connection strings are proper, and connecting to the right configuration server? Might be time to increase your logging for more detail.

Jeff Kalchik Systems Engineering Land O’Lakes

From: wodel youchi [mailto:wodel.youchi@gmail.com] Sent: Thursday, September 29, 2016 2:44 AM To: General discussion list for the 389 Directory server project. 389-users@lists.fedoraproject.org Subject: [389-users] Re: Remote Management Console doesn't show "Directory Server" entry anymore

Hi, Anyone?!!! Regards.

2016-09-27 22:33 GMT+01:00 wodel youchi <wodel.youchi@gmail.commailto:wodel.youchi@gmail.com>: Hi, I am using 389DS on Centos7 x64

[root@idm01 ~]# rpm -qa | grep 389 389-admin-console-doc-1.1.10-1.el7.noarch 389-console-1.1.9-1.el7.noarch 389-adminutil-1.1.22-1.el7.x86_64 389-admin-1.1.42-1.el7.x86_64 389-ds-base-1.3.4.0-33.el7_2.x86_64 389-ds-console-1.2.12-1.el7.noarch 389-ds-base-libs-1.3.4.0-33.el7_2.x86_64 389-admin-console-1.1.10-1.el7.noarch 389-ds-console-doc-1.2.12-1.el7.noarch A week ago I started having a weird problem using the 389DS's java management console remotely. If I connect locally with the console, I get the two entries of the directory server under server group : - Administration server - Directory server But when I use the console from another machine, a Windows machine with the management console installed on it, I get only the "Administration server" entry. So I cannot access the directory server to modify entries. I am using the 'Directoy Manager' to login to the console. I didn't find anything special on the error and access logs from neither the admin server no from the directory server. any idea where to search. Regards.

This message may contain confidential material from Land O'Lakes, Inc. (or its subsidiary) for the sole use of the intended recipient(s) and may not be reviewed, disclosed, copied, distributed or used by anyone other than the intended recipient(s). If you are not the intended recipient, please contact the sender by reply email and delete all copies of this message.

Mark Reynolds

4:11 p.m.

New subject: Remote Management Console doesn't show "Directory Server" entry anymore

I've never heard of this happening. What version of the windows console do you have?

The only thing I can suggest for now is to compare the configuration DS's access log when you connect locally, and when you connect from the windows box.

For example on my test system (localhost.localdomain), where I use example.com as the admin domain, I see this in the access log when I open the server group folder in the console:

... ... ... [29/Sep/2016:09:54:24.467557360 -0400] conn=1 op=46 SRCH base="cn=Server Group,cn=localhost.localdomain,ou=example.com,o=NetscapeRoot" scope=1 filter="(objectClass=nsApplication)" attrs=ALL [29/Sep/2016:09:54:24.467703551 -0400] conn=1 op=46 SORT cn (2) [29/Sep/2016:09:54:24.467976746 -0400] conn=1 op=46 RESULT err=0 tag=101 nentries=2 etime=0 ...

Two entries are returned (nentries): one for Admin Server and one for DS. If you are correct, you would be seeing nentries=1 from the windows box session.

So, start a "tail -f" on the DS access log of the Directory Server that has the o=netscaperoot suffix. Note there is log buffering of 30 seconds. Then log in to the console locally and check for this search in your "tail -f" output (you might have to wait 30 seconds for the buffering). Keep the "tail -f" running, and then do the same thing after logging in from the windows box. Are the results/nentries different? Are you even seeing the connection/search? Please post your access log output showing the two searches, like I did above.

Thanks,

Mark

On 09/29/2016 03:43 AM, wodel youchi wrote:

...

Hi,

Anyone?!!!

Regards.

2016-09-27 22:33 GMT+01:00 wodel youchi <wodel.youchi@gmail.com mailto:wodel.youchi@gmail.com>:

Hi,

I am using 389DS on Centos7 x64

[root@idm01 ~]# rpm -qa | grep 389
389-admin-console-doc-1.1.10-1.el7.noarch
389-console-1.1.9-1.el7.noarch
389-adminutil-1.1.22-1.el7.x86_64
389-admin-1.1.42-1.el7.x86_64
389-ds-base-1.3.4.0-33.el7_2.x86_64
389-ds-console-1.2.12-1.el7.noarch
389-ds-base-libs-1.3.4.0-33.el7_2.x86_64
389-admin-console-1.1.10-1.el7.noarch
389-ds-console-doc-1.2.12-1.el7.noarch

A week ago I started having a weird problem using the 389DS's java
management console remotely.

If I connect locally with the console, I get the two entries of
the directory server under server group :
- Administration server
- Directory server

But when I use the console from another machine, a Windows machine
with the management console installed on it, I get only the
"Administration server" entry.

So I cannot access the directory server to modify entries.
I am using the 'Directoy Manager' to login to the console.

I didn't find anything special on the error and access logs from
neither the admin server no from the directory server.

any idea where to search.

Regards.

389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org

wodel youchi

11:53 p.m.

New subject: Remote Management Console doesn't show "Directory Server" entry anymore

Hi, and thanks for your responses.

I did the test with both localhost and the Windows station, and here are the results

1- localhost

using :* /usr/bin/389-console -a http://localhost:9830 http://localhost:9830* to launch the console

Logged as cn=Directory Manager

[29/Sep/2016:20:41:59 +0100] conn=7219 op=0 BIND dn="cn=Directory Manager" method=128 version=3 [29/Sep/2016:20:41:59 +0100] conn=7219 op=0 RESULT err=0 tag=97 nentries=0 etime=0 dn="cn=directory manager" [29/Sep/2016:20:41:59 +0100] conn=7219 op=1 SRCH base="cn=user,cn=DefaultObjectClassesContainer,ou=1.1,ou=admin,ou=Global Preferences,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:41:59 +0100] conn=7219 op=1 RESULT err=0 tag=101 nentries=1 etime=0 ...

*[29/Sep/2016:20:42:22 +0100] conn=7219 op=46 SRCH base="cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=1 filter="(objectClass=nsApplication)" attrs=ALL[29/Sep/2016:20:42:22 +0100] conn=7219 op=46 SORT cn (2)[29/Sep/2016:20:42:22 +0100] conn=7219 op=46 RESULT err=0 tag=101 nentries=2 etime=0*[29/Sep/2016:20:42:22 +0100] conn=7219 op=47 SRCH base="cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=1 filter="(objectClass=netscapeServer)" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=47 SORT cn (2) [29/Sep/2016:20:42:22 +0100] conn=7219 op=47 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:42:22 +0100] conn=7219 op=48 SRCH base="cn=configuration,cn=admin-serv-idm01,cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=48 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:42:22 +0100] conn=7219 op=49 SRCH base="cn=configuration,cn=admin-serv-idm01,cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=49 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:42:22 +0100] conn=7219 op=50 SRCH base="cn=configuration,cn=admin-serv-idm01,cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=50 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:42:22 +0100] conn=7219 op=51 SRCH base="cn=admin-serv-idm01,cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=51 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:42:22 +0100] conn=7219 op=52 SRCH base="cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=52 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:42:22 +0100] conn=7219 op=53 SRCH base="cn=ResourceEditorExtension,ou=1.1,ou=admin,ou=Global Preferences,ou=mydomain.tld,o=NetscapeRoot" scope=1 filter="(objectClass=nsAdminResourceEditorExtension)" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=53 RESULT err=0 tag=101 nentries=6 etime=0

*[29/Sep/2016:20:42:22 +0100] conn=7219 op=54 SRCH base="cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=1 filter="(objectClass=netscapeServer)" attrs=ALL[29/Sep/2016:20:42:22 +0100] conn=7219 op=54 SORT cn (2)[29/Sep/2016:20:42:22 +0100] conn=7219 op=54 RESULT err=0 tag=101 nentries=1 etime=0* [29/Sep/2016:20:42:22 +0100] conn=7219 op=55 SRCH base="cn=configuration,cn=slapd-idm01,cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=55 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:42:22 +0100] conn=7219 op=56 SRCH base="cn=configuration,cn=slapd-idm01,cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=56 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:42:22 +0100] conn=7219 op=57 SRCH base="cn=configuration,cn=slapd-idm01,cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=57 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:42:22 +0100] conn=7219 op=58 SRCH base="ou=Console,ou=cn\3DDirectory Manager,ou=UserPreferences,ou=mydomain.tld,o=NetscapeRoot" scope=2 filter="(objectClass=*)" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=58 RESULT err=0 tag=101 nentries=12 etime=0 notes=U [29/Sep/2016:20:42:22 +0100] conn=7219 op=59 SRCH base="ou=1.1.14,ou=Console,ou=cn\3DDirectory Manager,ou=UserPreferences,ou=mydomain.tld,o=NetscapeRoot" scope=2 filter="(objectClass=*)" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=59 RESULT err=0 tag=101 nentries=5 etime=0 notes=U [29/Sep/2016:20:42:22 +0100] conn=7219 op=60 SRCH base="cn=DS_MISCELLANEOUS,ou=1.1.14,ou=Console,ou=cn\3DDirectory Manager,ou=UserPreferences,ou=mydomain.tld,o=NetscapeRoot" scope=2 filter="(objectClass=*)" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=60 RESULT err=0 tag=101 nentries=1 etime=0 notes=U [29/Sep/2016:20:42:22 +0100] conn=7219 op=61 SRCH base="cn=DS_MISCELLANEOUS,ou=1.1.14,ou=Console,ou=cn\3DDirectory Manager,ou=UserPreferences,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs="nsPreference" [29/Sep/2016:20:42:22 +0100] conn=7219 op=61 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:42:22 +0100] conn=7219 op=62 SRCH base="cn=slapd-idm01,cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=62 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:42:22 +0100] conn=7219 op=63 SRCH base="o=NetscapeRoot" scope=2 filter="(uid=*)" attrs="uid" [29/Sep/2016:20:42:22 +0100] conn=7219 op=63 RESULT err=0 tag=101 nentries=1 etime=0 notes=U [29/Sep/2016:20:42:23 +0100] conn=7219 op=64 SRCH base="cn=slapd-idm01,cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:42:23 +0100] conn=7219 op=64 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:42:23 +0100] conn=7219 op=65 SRCH base="cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:42:23 +0100] conn=7219 op=65 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:42:23 +0100] conn=7219 op=66 SRCH base="cn=ResourceEditorExtension,ou=1.1,ou=admin,ou=Global Preferences,ou=mydomain.tld,o=NetscapeRoot" scope=1 filter="(objectClass=nsAdminResourceEditorExtension)" attrs=ALL [29/Sep/2016:20:42:23 +0100] conn=7219 op=66 RESULT err=0 tag=101 nentries=6 etime=0

2- Windows station logged as cn=Directory Manager with url : http://idm01.mydomaine.tld:9830 389-Console for Windows version 1.1.15

*[29/Sep/2016:20:34:38 +0100] conn=6821 fd=65 slot=65 connection from 192.168.104.16 to 172.16.16.12[29/Sep/2016:20:34:38 +0100] conn=6821 op=0 BIND dn="cn=Directory Manager" method=128 version=3[29/Sep/2016:20:34:38 +0100] conn=6821 op=0 RESULT err=0 tag=97 nentries=0 etime=0 dn="cn=directory manager"* ...

*[29/Sep/2016:20:34:46 +0100] conn=6821 op=46 SRCH base="cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=1 filter="(objectClass=nsApplication)" attrs=ALL[29/Sep/2016:20:34:46 +0100] conn=6821 op=46 SORT cn (2)[29/Sep/2016:20:34:46 +0100] conn=6821 op=46 RESULT err=0 tag=101 nentries=2 etime=0* [29/Sep/2016:20:34:46 +0100] conn=6821 op=47 SRCH base="cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=1 filter="(objectClass=netscapeServer)" attrs=ALL [29/Sep/2016:20:34:46 +0100] conn=6821 op=47 SORT cn (2) [29/Sep/2016:20:34:46 +0100] conn=6821 op=47 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:34:47 +0100] conn=6821 op=48 SRCH base="cn=configuration,cn=admin-serv-idm01,cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=48 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:34:47 +0100] conn=6821 op=49 SRCH base="cn=configuration,cn=admin-serv-idm01,cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=49 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:34:47 +0100] conn=6821 op=50 SRCH base="cn=configuration,cn=admin-serv-idm01,cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=50 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:34:47 +0100] conn=6821 op=51 SRCH base="cn=admin-serv-idm01,cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=51 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:34:47 +0100] conn=6821 op=52 SRCH base="cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=52 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:34:47 +0100] conn=6821 op=53 SRCH base="cn=ResourceEditorExtension,ou=1.1,ou=admin,ou=Global Preferences,ou=mydomain.tld,o=NetscapeRoot" scope=1 filter="(objectClass=nsAdminResourceEditorExtension)" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=53 RESULT err=0 tag=101 nentries=6 etime=0

*[29/Sep/2016:20:34:47 +0100] conn=6821 op=54 SRCH base="cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=1 filter="(objectClass=netscapeServer)" attrs=ALL[29/Sep/2016:20:34:47 +0100] conn=6821 op=54 SORT cn (2)[29/Sep/2016:20:34:47 +0100] conn=6821 op=54 RESULT err=0 tag=101 nentries=1 etime=0* [29/Sep/2016:20:34:47 +0100] conn=6821 op=55 SRCH base="cn=configuration,cn=slapd-idm01,cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=55 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:34:47 +0100] conn=6821 op=56 SRCH base="cn=configuration,cn=slapd-idm01,cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=56 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:34:47 +0100] conn=6821 op=57 SRCH base="cn=configuration,cn=slapd-idm01,cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=57 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:34:47 +0100] conn=6821 op=58 SRCH base="ou=Console,ou=cn\3DDirectory Manager,ou=UserPreferences,ou=mydomain.tld,o=NetscapeRoot" scope=2 filter="(objectClass=*)" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=58 RESULT err=0 tag=101 nentries=12 etime=0 notes=U [29/Sep/2016:20:34:47 +0100] conn=6821 op=59 SRCH base="ou=1.1.14,ou=Console,ou=cn\3DDirectory Manager,ou=UserPreferences,ou=mydomain.tld,o=NetscapeRoot" scope=2 filter="(objectClass=*)" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=59 RESULT err=0 tag=101 nentries=5 etime=0 notes=U [29/Sep/2016:20:34:47 +0100] conn=6821 op=60 SRCH base="cn=DS_MISCELLANEOUS,ou=1.1.14,ou=Console,ou=cn\3DDirectory Manager,ou=UserPreferences,ou=mydomain.tld,o=NetscapeRoot" scope=2 filter="(objectClass=*)" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=60 RESULT err=0 tag=101 nentries=1 etime=0 notes=U [29/Sep/2016:20:34:47 +0100] conn=6821 op=61 SRCH base="cn=DS_MISCELLANEOUS,ou=1.1.14,ou=Console,ou=cn\3DDirectory Manager,ou=UserPreferences,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs="nsPreference" [29/Sep/2016:20:34:47 +0100] conn=6821 op=61 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:34:47 +0100] conn=6821 op=62 SRCH base="cn=slapd-idm01,cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=62 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:34:47 +0100] conn=6821 op=63 SRCH base="o=NetscapeRoot" scope=2 filter="(uid=*)" attrs="uid" [29/Sep/2016:20:34:47 +0100] conn=6821 op=63 RESULT err=0 tag=101 nentries=1 etime=0 notes=U

As you can see the two entries are detected on both connections, but on windows I can't see the Directory Server entry (see attachments).

Just to give more details. The setup we have, is a master slave installation, I did the installation, but I don't manage the servers, there is another person who does.

I week ago, the problem begun, the weirder thing, is when we connect to the slave server from windows all is perfect, the problem is only with the master, and only remotely.

PS : on localhost, I also used * /usr/bin/389-console -a http://idm01.mydomaine.tld:9830 http://idm01.mydomaine.tld:9830* and it worked perfectly.

So where to look from here!!!

Regards.

2016-09-29 15:11 GMT+01:00 Mark Reynolds mareynol@redhat.com:

...

I've never heard of this happening. What version of the windows console do you have?

The only thing I can suggest for now is to compare the configuration DS's access log when you connect locally, and when you connect from the windows box.

For example on my test system (localhost.localdomain), where I use example.com as the admin domain, I see this in the access log when I open the server group folder in the console: ... ... ... [29/Sep/2016:09:54:24.467557360 -0400] conn=1 op=46 SRCH base="cn=Server Group,cn=localhost.localdomain,ou=example.com,o=NetscapeRoot" scope=1 filter="(objectClass=nsApplication)" attrs=ALL [29/Sep/2016:09:54:24.467703551 -0400] conn=1 op=46 SORT cn (2) [29/Sep/2016:09:54:24.467976746 -0400] conn=1 op=46 RESULT err=0 tag=101 nentries=2 etime=0 ...

Two entries are returned (nentries): one for Admin Server and one for DS. If you are correct, you would be seeing nentries=1 from the windows box session.

So, start a "tail -f" on the DS access log of the Directory Server that has the o=netscaperoot suffix. Note there is log buffering of 30 seconds. Then log in to the console locally and check for this search in your "tail -f" output (you might have to wait 30 seconds for the buffering). Keep the "tail -f" running, and then do the same thing after logging in from the windows box. Are the results/nentries different? Are you even seeing the connection/search? Please post your access log output showing the two searches, like I did above.

Thanks,

Mark

On 09/29/2016 03:43 AM, wodel youchi wrote:

Hi,

Anyone?!!!

Regards.

2016-09-27 22:33 GMT+01:00 wodel youchi wodel.youchi@gmail.com:

...
Hi,

I am using 389DS on Centos7 x64

[root@idm01 ~]# rpm -qa | grep 389 389-admin-console-doc-1.1.10-1.el7.noarch 389-console-1.1.9-1.el7.noarch 389-adminutil-1.1.22-1.el7.x86_64 389-admin-1.1.42-1.el7.x86_64 389-ds-base-1.3.4.0-33.el7_2.x86_64 389-ds-console-1.2.12-1.el7.noarch 389-ds-base-libs-1.3.4.0-33.el7_2.x86_64 389-admin-console-1.1.10-1.el7.noarch 389-ds-console-doc-1.2.12-1.el7.noarch

A week ago I started having a weird problem using the 389DS's java management console remotely.

If I connect locally with the console, I get the two entries of the directory server under server group :

Administration server

Directory server

But when I use the console from another machine, a Windows machine with the management console installed on it, I get only the "Administration server" entry.

So I cannot access the directory server to modify entries. I am using the 'Directoy Manager' to login to the console.

I didn't find anything special on the error and access logs from neither the admin server no from the directory server.

any idea where to search.

Regards.

389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org

389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org

Noriko Hosoi

30 Sep 30 Sep

12:48 a.m.

New subject: Remote Management Console doesn't show "Directory Server" entry anymore

2016-09-29 15:11 GMT+01:00 Mark Reynolds <mareynol@redhat.com mailto:mareynol@redhat.com>:

I've never heard of this happening. What version of the windows console do you have?

I have never seen it, either... Could the 389-console-win version be 389-Console-1.1.15 (installer: 389-Console-1.1.15-x86_64.msi)? What are the Windows and java version?

Did you have a chance to refresh the Console?

Also, if you remove 389-ds-1.2_en.jar and 389-ds-1.2.jar from .389-console/jar directory in the Administrator's home directory, does it change any behavior?

Thanks, --noriko

On 09/29/2016 02:53 PM, wodel youchi wrote:

...

Hi, and thanks for your responses.

I did the test with both localhost and the Windows station, and here are the results

1- localhost

using :*/usr/bin/389-console -a http://localhost:9830* to launch the console

Logged as cn=Directory Manager

[29/Sep/2016:20:41:59 +0100] conn=7219 op=0 BIND dn="cn=Directory Manager" method=128 version=3 [29/Sep/2016:20:41:59 +0100] conn=7219 op=0 RESULT err=0 tag=97 nentries=0 etime=0 dn="cn=directory manager" [29/Sep/2016:20:41:59 +0100] conn=7219 op=1 SRCH base="cn=user,cn=DefaultObjectClassesContainer,ou=1.1,ou=admin,ou=Global Preferences,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:41:59 +0100] conn=7219 op=1 RESULT err=0 tag=101 nentries=1 etime=0 ... *[29/Sep/2016:20:42:22 +0100] conn=7219 op=46 SRCH base="cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=1 filter="(objectClass=nsApplication)" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=46 SORT cn (2) [29/Sep/2016:20:42:22 +0100] conn=7219 op=46 RESULT err=0 tag=101 nentries=2 etime=0

*[29/Sep/2016:20:42:22 +0100] conn=7219 op=47 SRCH base="cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=1 filter="(objectClass=netscapeServer)" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=47 SORT cn (2) [29/Sep/2016:20:42:22 +0100] conn=7219 op=47 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:42:22 +0100] conn=7219 op=48 SRCH base="cn=configuration,cn=admin-serv-idm01,cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=48 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:42:22 +0100] conn=7219 op=49 SRCH base="cn=configuration,cn=admin-serv-idm01,cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=49 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:42:22 +0100] conn=7219 op=50 SRCH base="cn=configuration,cn=admin-serv-idm01,cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=50 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:42:22 +0100] conn=7219 op=51 SRCH base="cn=admin-serv-idm01,cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=51 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:42:22 +0100] conn=7219 op=52 SRCH base="cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=52 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:42:22 +0100] conn=7219 op=53 SRCH base="cn=ResourceEditorExtension,ou=1.1,ou=admin,ou=Global Preferences,ou=mydomain.tld,o=NetscapeRoot" scope=1 filter="(objectClass=nsAdminResourceEditorExtension)" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=53 RESULT err=0 tag=101 nentries=6 etime=0 *[29/Sep/2016:20:42:22 +0100] conn=7219 op=54 SRCH base="cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=1 filter="(objectClass=netscapeServer)" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=54 SORT cn (2) [29/Sep/2016:20:42:22 +0100] conn=7219 op=54 RESULT err=0 tag=101 nentries=1 etime=0* [29/Sep/2016:20:42:22 +0100] conn=7219 op=55 SRCH base="cn=configuration,cn=slapd-idm01,cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=55 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:42:22 +0100] conn=7219 op=56 SRCH base="cn=configuration,cn=slapd-idm01,cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=56 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:42:22 +0100] conn=7219 op=57 SRCH base="cn=configuration,cn=slapd-idm01,cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=57 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:42:22 +0100] conn=7219 op=58 SRCH base="ou=Console,ou=cn\3DDirectory Manager,ou=UserPreferences,ou=mydomain.tld,o=NetscapeRoot" scope=2 filter="(objectClass=*)" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=58 RESULT err=0 tag=101 nentries=12 etime=0 notes=U [29/Sep/2016:20:42:22 +0100] conn=7219 op=59 SRCH base="ou=1.1.14,ou=Console,ou=cn\3DDirectory Manager,ou=UserPreferences,ou=mydomain.tld,o=NetscapeRoot" scope=2 filter="(objectClass=*)" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=59 RESULT err=0 tag=101 nentries=5 etime=0 notes=U [29/Sep/2016:20:42:22 +0100] conn=7219 op=60 SRCH base="cn=DS_MISCELLANEOUS,ou=1.1.14,ou=Console,ou=cn\3DDirectory Manager,ou=UserPreferences,ou=mydomain.tld,o=NetscapeRoot" scope=2 filter="(objectClass=*)" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=60 RESULT err=0 tag=101 nentries=1 etime=0 notes=U [29/Sep/2016:20:42:22 +0100] conn=7219 op=61 SRCH base="cn=DS_MISCELLANEOUS,ou=1.1.14,ou=Console,ou=cn\3DDirectory Manager,ou=UserPreferences,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs="nsPreference" [29/Sep/2016:20:42:22 +0100] conn=7219 op=61 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:42:22 +0100] conn=7219 op=62 SRCH base="cn=slapd-idm01,cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=62 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:42:22 +0100] conn=7219 op=63 SRCH base="o=NetscapeRoot" scope=2 filter="(uid=*)" attrs="uid" [29/Sep/2016:20:42:22 +0100] conn=7219 op=63 RESULT err=0 tag=101 nentries=1 etime=0 notes=U [29/Sep/2016:20:42:23 +0100] conn=7219 op=64 SRCH base="cn=slapd-idm01,cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:42:23 +0100] conn=7219 op=64 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:42:23 +0100] conn=7219 op=65 SRCH base="cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:42:23 +0100] conn=7219 op=65 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:42:23 +0100] conn=7219 op=66 SRCH base="cn=ResourceEditorExtension,ou=1.1,ou=admin,ou=Global Preferences,ou=mydomain.tld,o=NetscapeRoot" scope=1 filter="(objectClass=nsAdminResourceEditorExtension)" attrs=ALL [29/Sep/2016:20:42:23 +0100] conn=7219 op=66 RESULT err=0 tag=101 nentries=6 etime=0

2- Windows station logged as cn=Directory Manager with url : http://idm01.mydomaine.tld:9830 389-Console for Windows version 1.1.15

*[29/Sep/2016:20:34:38 +0100] conn=6821 fd=65 slot=65 connection from 192.168.104.16 to 172.16.16.12 [29/Sep/2016:20:34:38 +0100] conn=6821 op=0 BIND dn="cn=Directory Manager" method=128 version=3 [29/Sep/2016:20:34:38 +0100] conn=6821 op=0 RESULT err=0 tag=97 nentries=0 etime=0 dn="cn=directory manager"* ... *[29/Sep/2016:20:34:46 +0100] conn=6821 op=46 SRCH base="cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=1 filter="(objectClass=nsApplication)" attrs=ALL [29/Sep/2016:20:34:46 +0100] conn=6821 op=46 SORT cn (2) [29/Sep/2016:20:34:46 +0100] conn=6821 op=46 RESULT err=0 tag=101 nentries=2 etime=0* [29/Sep/2016:20:34:46 +0100] conn=6821 op=47 SRCH base="cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=1 filter="(objectClass=netscapeServer)" attrs=ALL [29/Sep/2016:20:34:46 +0100] conn=6821 op=47 SORT cn (2) [29/Sep/2016:20:34:46 +0100] conn=6821 op=47 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:34:47 +0100] conn=6821 op=48 SRCH base="cn=configuration,cn=admin-serv-idm01,cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=48 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:34:47 +0100] conn=6821 op=49 SRCH base="cn=configuration,cn=admin-serv-idm01,cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=49 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:34:47 +0100] conn=6821 op=50 SRCH base="cn=configuration,cn=admin-serv-idm01,cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=50 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:34:47 +0100] conn=6821 op=51 SRCH base="cn=admin-serv-idm01,cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=51 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:34:47 +0100] conn=6821 op=52 SRCH base="cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=52 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:34:47 +0100] conn=6821 op=53 SRCH base="cn=ResourceEditorExtension,ou=1.1,ou=admin,ou=Global Preferences,ou=mydomain.tld,o=NetscapeRoot" scope=1 filter="(objectClass=nsAdminResourceEditorExtension)" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=53 RESULT err=0 tag=101 nentries=6 etime=0 *[29/Sep/2016:20:34:47 +0100] conn=6821 op=54 SRCH base="cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=1 filter="(objectClass=netscapeServer)" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=54 SORT cn (2) [29/Sep/2016:20:34:47 +0100] conn=6821 op=54 RESULT err=0 tag=101 nentries=1 etime=0* [29/Sep/2016:20:34:47 +0100] conn=6821 op=55 SRCH base="cn=configuration,cn=slapd-idm01,cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=55 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:34:47 +0100] conn=6821 op=56 SRCH base="cn=configuration,cn=slapd-idm01,cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=56 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:34:47 +0100] conn=6821 op=57 SRCH base="cn=configuration,cn=slapd-idm01,cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=57 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:34:47 +0100] conn=6821 op=58 SRCH base="ou=Console,ou=cn\3DDirectory Manager,ou=UserPreferences,ou=mydomain.tld,o=NetscapeRoot" scope=2 filter="(objectClass=*)" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=58 RESULT err=0 tag=101 nentries=12 etime=0 notes=U [29/Sep/2016:20:34:47 +0100] conn=6821 op=59 SRCH base="ou=1.1.14,ou=Console,ou=cn\3DDirectory Manager,ou=UserPreferences,ou=mydomain.tld,o=NetscapeRoot" scope=2 filter="(objectClass=*)" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=59 RESULT err=0 tag=101 nentries=5 etime=0 notes=U [29/Sep/2016:20:34:47 +0100] conn=6821 op=60 SRCH base="cn=DS_MISCELLANEOUS,ou=1.1.14,ou=Console,ou=cn\3DDirectory Manager,ou=UserPreferences,ou=mydomain.tld,o=NetscapeRoot" scope=2 filter="(objectClass=*)" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=60 RESULT err=0 tag=101 nentries=1 etime=0 notes=U [29/Sep/2016:20:34:47 +0100] conn=6821 op=61 SRCH base="cn=DS_MISCELLANEOUS,ou=1.1.14,ou=Console,ou=cn\3DDirectory Manager,ou=UserPreferences,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs="nsPreference" [29/Sep/2016:20:34:47 +0100] conn=6821 op=61 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:34:47 +0100] conn=6821 op=62 SRCH base="cn=slapd-idm01,cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=62 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:34:47 +0100] conn=6821 op=63 SRCH base="o=NetscapeRoot" scope=2 filter="(uid=*)" attrs="uid" [29/Sep/2016:20:34:47 +0100] conn=6821 op=63 RESULT err=0 tag=101 nentries=1 etime=0 notes=U

As you can see the two entries are detected on both connections, but on windows I can't see the Directory Server entry (see attachments).

Just to give more details. The setup we have, is a master slave installation, I did the installation, but I don't manage the servers, there is another person who does.

I week ago, the problem begun, the weirder thing, is when we connect to the slave server from windows all is perfect, the problem is only with the master, and only remotely.

PS : on localhost, I also used */usr/bin/389-console -a http://idm01.mydomaine.tld:9830* and it worked perfectly.

So where to look from here!!!

Regards.

2016-09-29 15:11 GMT+01:00 Mark Reynolds <mareynol@redhat.com mailto:mareynol@redhat.com>:
I've never heard of this happening.  What version of the windows
console do you have?

The only thing I can suggest for now is to compare the
configuration DS's access log when you connect locally, and when
you connect from the windows box.

For example on my test system (localhost.localdomain), where I use
example.com <http://example.com> as the admin domain, I see this
in the access log when I open the server group folder in the console:

...
...
...
[29/Sep/2016:09:54:24.467557360 -0400] conn=1 op=46 SRCH
base="cn=Server Group,cn=localhost.localdomain,ou=example.com
<http://example.com>,o=NetscapeRoot" scope=1
filter="(objectClass=nsApplication)" attrs=ALL
[29/Sep/2016:09:54:24.467703551 -0400] conn=1 op=46 SORT cn (2)
[29/Sep/2016:09:54:24.467976746 -0400] conn=1 op=46 RESULT err=0
tag=101 nentries=2 etime=0
...

Two entries are returned (nentries): one for Admin Server and one
for DS.  If you are correct, you would be seeing nentries=1 from
the windows box session.

So, start a "tail -f" on the DS access log of the Directory Server
that has the o=netscaperoot suffix. Note there is log buffering of
30 seconds.  Then log in to the console locally and check for this
search in your "tail -f" output (you might have to wait 30 seconds
for the buffering).  Keep the "tail -f" running, and then do the
same thing after logging in from the windows box. Are the
results/nentries different?  Are you even seeing the
connection/search?  Please post your access log output showing the
two searches, like I did above.

Thanks,

Mark


On 09/29/2016 03:43 AM, wodel youchi wrote:
...
Hi,

Anyone?!!!

Regards.

2016-09-27 22:33 GMT+01:00 wodel youchi <wodel.youchi@gmail.com
<mailto:wodel.youchi@gmail.com>>:

    Hi,

    I am using 389DS on Centos7 x64

    [root@idm01 ~]# rpm -qa | grep 389
    389-admin-console-doc-1.1.10-1.el7.noarch
    389-console-1.1.9-1.el7.noarch
    389-adminutil-1.1.22-1.el7.x86_64
    389-admin-1.1.42-1.el7.x86_64
    389-ds-base-1.3.4.0-33.el7_2.x86_64
    389-ds-console-1.2.12-1.el7.no
    <http://389-ds-console-1.2.12-1.el7.no>arch
    389-ds-base-libs-1.3.4.0-33.el7_2.x86_64
    389-admin-console-1.1.10-1.el7.noarch
    389-ds-console-doc-1.2.12-1.el7.noarch

    A week ago I started having a weird problem using the 389DS's
    java management console remotely.

    If I connect locally with the console, I get the two entries
    of the directory server under server group :
    - Administration server
    - Directory server

    But when I use the console from another machine, a Windows
    machine with the management console installed on it, I get
    only the "Administration server" entry.

    So I cannot access the directory server to modify entries.
    I am using the 'Directoy Manager' to login to the console.

    I didn't find anything special on the error and access logs
    from neither the admin server no from the directory server.

    any idea where to search.

    Regards.




_______________________________________________
389-users mailing list --389-users@lists.fedoraproject.org
<mailto:389-users@lists.fedoraproject.org>
To unsubscribe send an email to389-users-leave@lists.fedoraproject.org
<mailto:389-users-leave@lists.fedoraproject.org>
_______________________________________________ 389-users mailing
list -- 389-users@lists.fedoraproject.org
<mailto:389-users@lists.fedoraproject.org> To unsubscribe send an
email to 389-users-leave@lists.fedoraproject.org
<mailto:389-users-leave@lists.fedoraproject.org> 
389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org

wodel youchi

4 Oct 4 Oct

2:26 p.m.

New subject: Remote Management Console doesn't show "Directory Server" entry anymore

Hi again,

I did find that the console architecture and the JRE I was using were different, the console was 64bits while the JRE was 32bits.

I uninstalled the JRE and installed the latest one found on oracle's site the v8 update 102.

This did solve the problem, but I can't explain why it worked with the slave server.

I think, it was a java problem not an architecture problem, but I am not sure.

Thank you all for your help.

Regards

Regards.

2016-09-29 23:48 GMT+01:00 Noriko Hosoi nhosoi@redhat.com:

...

2016-09-29 15:11 GMT+01:00 Mark Reynolds mareynol@redhat.com:

...
I've never heard of this happening. What version of the windows console do you have?

I have never seen it, either... Could the 389-console-win version be 389-Console-1.1.15 (installer: 389-Console-1.1.15-x86_64.msi)? What are the Windows and java version?

Did you have a chance to refresh the Console?

Also, if you remove 389-ds-1.2_en.jar and 389-ds-1.2.jar from .389-console/jar directory in the Administrator's home directory, does it change any behavior?

Thanks, --noriko

On 09/29/2016 02:53 PM, wodel youchi wrote:

Hi, and thanks for your responses.

I did the test with both localhost and the Windows station, and here are the results

1- localhost

using :* /usr/bin/389-console -a http://localhost:9830 http://localhost:9830 http://localhost:9830* to launch the console

Logged as cn=Directory Manager

[29/Sep/2016:20:41:59 +0100] conn=7219 op=0 BIND dn="cn=Directory Manager" method=128 version=3 [29/Sep/2016:20:41:59 +0100] conn=7219 op=0 RESULT err=0 tag=97 nentries=0 etime=0 dn="cn=directory manager" [29/Sep/2016:20:41:59 +0100] conn=7219 op=1 SRCH base="cn=user,cn= DefaultObjectClassesContainer,ou=1.1,ou=admin,ou=Global Preferences,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:41:59 +0100] conn=7219 op=1 RESULT err=0 tag=101 nentries=1 etime=0 ...

*[29/Sep/2016:20:42:22 +0100] conn=7219 op=46 SRCH base="cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=1 filter="(objectClass=nsApplication)" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=46 SORT cn (2) [29/Sep/2016:20:42:22 +0100] conn=7219 op=46 RESULT err=0 tag=101 nentries=2 etime=0 *[29/Sep/2016:20:42:22 +0100] conn=7219 op=47 SRCH base="cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=1 filter="(objectClass=netscapeServer)" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=47 SORT cn (2) [29/Sep/2016:20:42:22 +0100] conn=7219 op=47 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:42:22 +0100] conn=7219 op=48 SRCH base="cn=configuration,cn=admin-serv-idm01,cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=48 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:42:22 +0100] conn=7219 op=49 SRCH base="cn=configuration,cn=admin-serv-idm01,cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=49 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:42:22 +0100] conn=7219 op=50 SRCH base="cn=configuration,cn=admin-serv-idm01,cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=50 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:42:22 +0100] conn=7219 op=51 SRCH base="cn=admin-serv-idm01,cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=51 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:42:22 +0100] conn=7219 op=52 SRCH base="cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld, ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=52 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:42:22 +0100] conn=7219 op=53 SRCH base="cn= ResourceEditorExtension,ou=1.1,ou=admin,ou=Global Preferences,ou=mydomain.tld,o=NetscapeRoot" scope=1 filter="(objectClass= nsAdminResourceEditorExtension)" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=53 RESULT err=0 tag=101 nentries=6 etime=0

*[29/Sep/2016:20:42:22 +0100] conn=7219 op=54 SRCH base="cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=1 filter="(objectClass=netscapeServer)" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=54 SORT cn (2) [29/Sep/2016:20:42:22 +0100] conn=7219 op=54 RESULT err=0 tag=101 nentries=1 etime=0* [29/Sep/2016:20:42:22 +0100] conn=7219 op=55 SRCH base="cn=configuration,cn=slapd-idm01,cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=55 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:42:22 +0100] conn=7219 op=56 SRCH base="cn=configuration,cn=slapd-idm01,cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=56 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:42:22 +0100] conn=7219 op=57 SRCH base="cn=configuration,cn=slapd-idm01,cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=57 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:42:22 +0100] conn=7219 op=58 SRCH base="ou=Console,ou=cn\3DDirectory Manager,ou=UserPreferences,ou=mydomain.tld,o=NetscapeRoot" scope=2 filter="(objectClass=*)" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=58 RESULT err=0 tag=101 nentries=12 etime=0 notes=U [29/Sep/2016:20:42:22 +0100] conn=7219 op=59 SRCH base="ou=1.1.14,ou=Console,ou=cn\3DDirectory Manager,ou=UserPreferences,ou=mydomain.tld,o=NetscapeRoot" scope=2 filter="(objectClass=*)" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=59 RESULT err=0 tag=101 nentries=5 etime=0 notes=U [29/Sep/2016:20:42:22 +0100] conn=7219 op=60 SRCH base="cn=DS_MISCELLANEOUS,ou=1.1.14,ou=Console,ou=cn\3DDirectory Manager,ou=UserPreferences,ou=mydomain.tld,o=NetscapeRoot" scope=2 filter="(objectClass=*)" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=60 RESULT err=0 tag=101 nentries=1 etime=0 notes=U [29/Sep/2016:20:42:22 +0100] conn=7219 op=61 SRCH base="cn=DS_MISCELLANEOUS,ou=1.1.14,ou=Console,ou=cn\3DDirectory Manager,ou=UserPreferences,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs="nsPreference" [29/Sep/2016:20:42:22 +0100] conn=7219 op=61 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:42:22 +0100] conn=7219 op=62 SRCH base="cn=slapd-idm01,cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:42:22 +0100] conn=7219 op=62 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:42:22 +0100] conn=7219 op=63 SRCH base="o=NetscapeRoot" scope=2 filter="(uid=*)" attrs="uid" [29/Sep/2016:20:42:22 +0100] conn=7219 op=63 RESULT err=0 tag=101 nentries=1 etime=0 notes=U [29/Sep/2016:20:42:23 +0100] conn=7219 op=64 SRCH base="cn=slapd-idm01,cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:42:23 +0100] conn=7219 op=64 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:42:23 +0100] conn=7219 op=65 SRCH base="cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:42:23 +0100] conn=7219 op=65 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:42:23 +0100] conn=7219 op=66 SRCH base="cn= ResourceEditorExtension,ou=1.1,ou=admin,ou=Global Preferences,ou=mydomain.tld,o=NetscapeRoot" scope=1 filter="(objectClass= nsAdminResourceEditorExtension)" attrs=ALL [29/Sep/2016:20:42:23 +0100] conn=7219 op=66 RESULT err=0 tag=101 nentries=6 etime=0

2- Windows station logged as cn=Directory Manager with url : http://idm01.mydomaine.tld:9830 http://idm01.mydomaine.tld:9830 389-Console for Windows version 1.1.15

*[29/Sep/2016:20:34:38 +0100] conn=6821 fd=65 slot=65 connection from 192.168.104.16 to 172.16.16.12 [29/Sep/2016:20:34:38 +0100] conn=6821 op=0 BIND dn="cn=Directory Manager" method=128 version=3 [29/Sep/2016:20:34:38 +0100] conn=6821 op=0 RESULT err=0 tag=97 nentries=0 etime=0 dn="cn=directory manager"* ...

*[29/Sep/2016:20:34:46 +0100] conn=6821 op=46 SRCH base="cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=1 filter="(objectClass=nsApplication)" attrs=ALL [29/Sep/2016:20:34:46 +0100] conn=6821 op=46 SORT cn (2) [29/Sep/2016:20:34:46 +0100] conn=6821 op=46 RESULT err=0 tag=101 nentries=2 etime=0* [29/Sep/2016:20:34:46 +0100] conn=6821 op=47 SRCH base="cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld, ou=mydomain.tld,o=NetscapeRoot" scope=1 filter="(objectClass=netscapeServer)" attrs=ALL [29/Sep/2016:20:34:46 +0100] conn=6821 op=47 SORT cn (2) [29/Sep/2016:20:34:46 +0100] conn=6821 op=47 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:34:47 +0100] conn=6821 op=48 SRCH base="cn=configuration,cn=admin-serv-idm01,cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=48 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:34:47 +0100] conn=6821 op=49 SRCH base="cn=configuration,cn=admin-serv-idm01,cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=49 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:34:47 +0100] conn=6821 op=50 SRCH base="cn=configuration,cn=admin-serv-idm01,cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=50 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:34:47 +0100] conn=6821 op=51 SRCH base="cn=admin-serv-idm01,cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=51 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:34:47 +0100] conn=6821 op=52 SRCH base="cn=389 Administration Server,cn=Server Group,cn=idm01.mydomain.tld, ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=52 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:34:47 +0100] conn=6821 op=53 SRCH base="cn= ResourceEditorExtension,ou=1.1,ou=admin,ou=Global Preferences,ou=mydomain.tld,o=NetscapeRoot" scope=1 filter="(objectClass= nsAdminResourceEditorExtension)" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=53 RESULT err=0 tag=101 nentries=6 etime=0

*[29/Sep/2016:20:34:47 +0100] conn=6821 op=54 SRCH base="cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=1 filter="(objectClass=netscapeServer)" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=54 SORT cn (2) [29/Sep/2016:20:34:47 +0100] conn=6821 op=54 RESULT err=0 tag=101 nentries=1 etime=0* [29/Sep/2016:20:34:47 +0100] conn=6821 op=55 SRCH base="cn=configuration,cn=slapd-idm01,cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=55 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:34:47 +0100] conn=6821 op=56 SRCH base="cn=configuration,cn=slapd-idm01,cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=56 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:34:47 +0100] conn=6821 op=57 SRCH base="cn=configuration,cn=slapd-idm01,cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=57 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:34:47 +0100] conn=6821 op=58 SRCH base="ou=Console,ou=cn\3DDirectory Manager,ou=UserPreferences,ou=mydomain.tld,o=NetscapeRoot" scope=2 filter="(objectClass=*)" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=58 RESULT err=0 tag=101 nentries=12 etime=0 notes=U [29/Sep/2016:20:34:47 +0100] conn=6821 op=59 SRCH base="ou=1.1.14,ou=Console,ou=cn\3DDirectory Manager,ou=UserPreferences,ou=mydomain.tld,o=NetscapeRoot" scope=2 filter="(objectClass=*)" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=59 RESULT err=0 tag=101 nentries=5 etime=0 notes=U [29/Sep/2016:20:34:47 +0100] conn=6821 op=60 SRCH base="cn=DS_MISCELLANEOUS,ou=1.1.14,ou=Console,ou=cn\3DDirectory Manager,ou=UserPreferences,ou=mydomain.tld,o=NetscapeRoot" scope=2 filter="(objectClass=*)" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=60 RESULT err=0 tag=101 nentries=1 etime=0 notes=U [29/Sep/2016:20:34:47 +0100] conn=6821 op=61 SRCH base="cn=DS_MISCELLANEOUS,ou=1.1.14,ou=Console,ou=cn\3DDirectory Manager,ou=UserPreferences,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs="nsPreference" [29/Sep/2016:20:34:47 +0100] conn=6821 op=61 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:34:47 +0100] conn=6821 op=62 SRCH base="cn=slapd-idm01,cn=389 Directory Server,cn=Server Group,cn=idm01.mydomain.tld,ou=mydomain.tld,o=NetscapeRoot" scope=0 filter="(|(objectClass=*)(objectClass=ldapsubentry))" attrs=ALL [29/Sep/2016:20:34:47 +0100] conn=6821 op=62 RESULT err=0 tag=101 nentries=1 etime=0 [29/Sep/2016:20:34:47 +0100] conn=6821 op=63 SRCH base="o=NetscapeRoot" scope=2 filter="(uid=*)" attrs="uid" [29/Sep/2016:20:34:47 +0100] conn=6821 op=63 RESULT err=0 tag=101 nentries=1 etime=0 notes=U

As you can see the two entries are detected on both connections, but on windows I can't see the Directory Server entry (see attachments).

Just to give more details. The setup we have, is a master slave installation, I did the installation, but I don't manage the servers, there is another person who does.

I week ago, the problem begun, the weirder thing, is when we connect to the slave server from windows all is perfect, the problem is only with the master, and only remotely.

PS : on localhost, I also used * /usr/bin/389-console -a http://idm01.mydomaine.tld:9830 http://idm01.mydomaine.tld:9830* and it worked perfectly.

So where to look from here!!!

Regards.

2016-09-29 15:11 GMT+01:00 Mark Reynolds mareynol@redhat.com:

...
I've never heard of this happening. What version of the windows console do you have?

The only thing I can suggest for now is to compare the configuration DS's access log when you connect locally, and when you connect from the windows box.

For example on my test system (localhost.localdomain), where I use example.com as the admin domain, I see this in the access log when I open the server group folder in the console: ... ... ... [29/Sep/2016:09:54:24.467557360 -0400] conn=1 op=46 SRCH base="cn=Server Group,cn=localhost.localdomain,ou=example.com,o=NetscapeRoot" scope=1 filter="(objectClass=nsApplication)" attrs=ALL [29/Sep/2016:09:54:24.467703551 -0400] conn=1 op=46 SORT cn (2) [29/Sep/2016:09:54:24.467976746 -0400] conn=1 op=46 RESULT err=0 tag=101 nentries=2 etime=0 ...

Two entries are returned (nentries): one for Admin Server and one for DS. If you are correct, you would be seeing nentries=1 from the windows box session.

So, start a "tail -f" on the DS access log of the Directory Server that has the o=netscaperoot suffix. Note there is log buffering of 30 seconds. Then log in to the console locally and check for this search in your "tail -f" output (you might have to wait 30 seconds for the buffering). Keep the "tail -f" running, and then do the same thing after logging in from the windows box. Are the results/nentries different? Are you even seeing the connection/search? Please post your access log output showing the two searches, like I did above.

Thanks,

Mark

On 09/29/2016 03:43 AM, wodel youchi wrote:

Hi,

Anyone?!!!

Regards.

2016-09-27 22:33 GMT+01:00 wodel youchi < wodel.youchi@gmail.com wodel.youchi@gmail.com>:

...
Hi,

I am using 389DS on Centos7 x64

[root@idm01 ~]# rpm -qa | grep 389 389-admin-console-doc-1.1.10-1.el7.noarch 389-console-1.1.9-1.el7.noarch 389-adminutil-1.1.22-1.el7.x86_64 389-admin-1.1.42-1.el7.x86_64 389-ds-base-1.3.4.0-33.el7_2.x86_64 389-ds-console-1.2.12-1.el7.noarch 389-ds-base-libs-1.3.4.0-33.el7_2.x86_64 389-admin-console-1.1.10-1.el7.noarch 389-ds-console-doc-1.2.12-1.el7.noarch

A week ago I started having a weird problem using the 389DS's java management console remotely.

If I connect locally with the console, I get the two entries of the directory server under server group :

Administration server

Directory server

But when I use the console from another machine, a Windows machine with the management console installed on it, I get only the "Administration server" entry.

So I cannot access the directory server to modify entries. I am using the 'Directoy Manager' to login to the console.

I didn't find anything special on the error and access logs from neither the admin server no from the directory server.

any idea where to search.

Regards.

389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org

_______________________________________________ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org

389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org

389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org

2989

Age (days ago)

2996

Last active (days ago)

389-users@lists.fedoraproject.org

6 comments

4 participants

tags (0)

participants (4)

Kalchik, Jeffery
Mark Reynolds
Noriko Hosoi
wodel youchi