Could you please double check your Directory Server is configured with
SSLv3 disabled?
OK, new error now after upgrading:
Unable to create ssl socket
org.mozilla.jss.ssl.SSLSocketException: SSL_ForceHandshake failed:
(-12279) Peer using unsupported version of security protocol.
at org.mozilla.jss.ssl.SSLSocket.forceHandshake(Native Method)
at com.netscape.management.client.comm.HttpsChannel.open(Unknown Source)
at com.netscape.management.client.comm.CommManager.send(Unknown Source)
at com.netscape.management.client.comm.HttpManager.get(Unknown Source)
at com.netscape.management.client.console.Console.invoke_task(Unknown
Source)
at
com.netscape.management.client.console.Console.authenticate_user(Unknown
Source)
at com.netscape.management.client.console.Console.<init>(Unknown Source)
at com.netscape.management.client.console.Console.main(Unknown Source)
JButtonFactory: button width = 54
JButtonFactory: button height = 20
JButtonFactory: button width = 54
JButtonFactory: button height = 20
JButtonFactory: button width = 54
JButtonFactory: button height = 20
JButtonFactory: button width = 54
JButtonFactory: button height = 20
Dan Franciscus
Systems Administrator
Information Technology Group
Institute for Advanced Study
609-734-8138
------------------------------------------------------------------------
*From: *"Mark Reynolds" <mareynol(a)redhat.com>
*To: *"General discussion list for the 389 Directory server project."
<389-users(a)lists.fedoraproject.org>, mreynolds(a)redhat.com
*Sent: *Wednesday, March 2, 2016 11:03:21 AM
*Subject: *[389-users] Re: Unable to connect to Admin server via 389
windows console
On 03/02/2016 08:29 AM, Daniel Franciscus wrote:
C:\Program Files\389 Management Console>"java"
"-Djava.library.path=." -cp
"./jss4.jar;./ldapjdk.jar;./idm-console-base.jar;./idm-console-mcc.jar;./idm-console-mcc_en.jar;./idm-console-nmclf.jar;./idm-console-nmclf_en.jar;./389-console_en.jar"
-Djava.util.prefs.systemRo
ot=I:\/.389-console -Djava.util.prefs.userRoot=I:\/.389-console
-Djava.net.preferIPv4Stack=true
com.netscape.management.client.console.Console -D 9
java.util.prefs.userRoot=I:\/.389-console
java.runtime.name=Java(TM) SE Runtime Environment
sun.boot.library.path=C:\Program Files\Java\jre7\bin
java.vm.version=23.5-b02
java.vm.vendor=Oracle Corporation
java.vendor.url=http://java.oracle.com/
path.separator=;
java.vm.name=Java HotSpot(TM) 64-Bit Server VM
file.encoding.pkg=sun.io
user.country=US
user.script=
sun.java.launcher=SUN_STANDARD
sun.os.patch.level=
java.vm.specification.name=Java Virtual Machine Specification
user.dir=C:\Program Files\389 Management Console
java.runtime.version=1.7.0_09-b05
java.awt.graphicsenv=sun.awt.Win32GraphicsEnvironment
java.endorsed.dirs=C:\Program Files\Java\jre7\lib\endorsed
os.arch=amd64
java.io.tmpdir=C:\Users\hermes\AppData\Local\Temp\
line.separator=
java.vm.specification.vendor=Oracle Corporation
user.variant=
os.name=Windows Server 2012
sun.jnu.encoding=Cp1252
java.library.path=.
java.specification.name=Java Platform API Specification
java.class.version=51.0
java.net.preferIPv4Stack=true
sun.management.compiler=HotSpot 64-Bit Tiered Compilers
os.version=6.2
user.home=C:\Users\hermes
user.timezone=America/New_York
java.awt.printerjob=sun.awt.windows.WPrinterJob
file.encoding=Cp1252
java.specification.version=1.7
java.class.path=./jss4.jar;./ldapjdk.jar;./idm-console-base.jar;./idm-console-mcc.jar;./idm-console-mcc_en.jar;./idm-console-nmclf.jar;./idm-console-nmclf_en.jar;./389-console_en.jar
user.name=hermes
java.vm.specification.version=1.7
sun.java.command=com.netscape.management.client.console.Console -D 9
java.home=C:\Program Files\Java\jre7
sun.arch.data.model=64
java.util.prefs.systemRoot=I:\/.389-console
user.language=en
java.specification.vendor=Oracle Corporation
awt.toolkit=sun.awt.windows.WToolkit
java.vm.info=mixed mode
java.version=1.7.0_09
java.ext.dirs=C:\Program
Files\Java\jre7\lib\ext;C:\Windows\Sun\Java\lib\ext
sun.boot.class.path=C:\Program
Files\Java\jre7\lib\resources.jar;C:\Program
Files\Java\jre7\lib\rt.jar;C:\Program
Files\Java\jre7\lib\sunrsasign.jar;C:\Program
Files\Java\jre7\lib\jsse.jar;C:\Program
Files\Java\jre7\lib\jce.jar;C:\Program Files\Java\jre7\lib\charsets.ja
r;C:\Program Files\Java\jre7\lib\jfr.jar;C:\Program
Files\Java\jre7\classes
java.vendor=Oracle Corporation
file.separator=\
java.vendor.url.bug=http://bugreport.sun.com/bugreport/
sun.io.unicode.encoding=UnicodeLittle
sun.cpu.endian=little
sun.desktop=windows
sun.cpu.isalist=amd64
*389-Management-Console/1.1.14 B2015.147.2124*
You are not on the latest software. The latest is 1.1.15 which fixes
the ssl connection issues:
389 Windows Console 1.1.15
The 389 Directory Server team is proud to announce 389-console-win
version 1.1.15.
Windows installers are available to download from Download 389 Windows
Console (32-bit)
<
http://www.port389.org/binaries/389-Console-1.1.15-i386.msi> and
Download 389 Windows Console (64-bit)
<
http://www.port389.org/binaries/389-Console-1.1.15-x86_64.msi>.
Highlights in 389-console-win-1.1.15
* Windows Console now has the same bug fixes and enhancements made
for the Fedora 389-console.
* *A connection failure problem over **SSL**/start**TLS**was fixed.*
Please download it.
RemoteImage: NOT found in cache
loader447561888:com/netscape/management/nmclf/icons/Error.gif
RemoteImage: Create RemoteImage cache for loader447561888
RemoteImage: NOT found in cache
loader447561888:com/netscape/management/nmclf/icons/Inform.gif
RemoteImage: NOT found in cache
loader447561888:com/netscape/management/nmclf/icons/Warn.gif
RemoteImage: NOT found in cache
loader447561888:com/netscape/management/nmclf/icons/Question.gif
ResourceSet: NOT found in cache
loader447561888:com.netscape.management.client.components.components
RemoteImage: NOT found in cache
loader447561888:com/netscape/management/client/theme/images/logo16.gif
RemoteImage: NOT found in cache
loader447561888:com/netscape/management/client/theme/images/login.gif
ResourceSet: NOT found in cache
loader447561888:com.netscape.management.client.util.default
ResourceSet: found in cache
loader447561888:com.netscape.management.client.util.default
JButtonFactory: button width = 54
JButtonFactory: button height = 20
JButtonFactory: button width = 54
JButtonFactory: button height = 20
JButtonFactory: button width = 72
JButtonFactory: button height = 20
JButtonFactory: button width = 72
JButtonFactory: button height = 20
JButtonFactory: button width = 72
JButtonFactory: button height = 20
JButtonFactory: button width = 72
JButtonFactory: button height = 20
JButtonFactory: button width = 54
JButtonFactory: button height = 20
JButtonFactory: button width = 72
JButtonFactory: button width = 72
CommManager> New CommRecord
(
https://server:9830/admin-serv/authenticate)
ResourceSet: found in cache
loader447561888:com.netscape.management.client.theme.theme
ResourceSet: NOT found in cache
loader447561888:com.netscape.management.client.comm.HttpsChannel
CREATE JSS SSLSocket
Exception in thread "main" java.lang.UnsatisfiedLinkError:
org.mozilla.jss.ssl.SSLSocket.setSSLVersionRangeDefault(III)V
at org.mozilla.jss.ssl.SSLSocket.setSSLVersionRangeDefault(Native
Method)
at
org.mozilla.jss.ssl.SSLSocket.setSSLVersionRangeDefault(SSLSocket.java:1001)
at com.netscape.management.client.comm.HttpsChannel.open(Unknown
Source)
at com.netscape.management.client.comm.CommManager.send(Unknown
Source)
at com.netscape.management.client.comm.HttpManager.get(Unknown Source)
at
com.netscape.management.client.console.Console.invoke_task(Unknown
Source)
at
com.netscape.management.client.console.Console.authenticate_user(Unknown
Source)
at com.netscape.management.client.console.Console.<init>(Unknown
Source)
at com.netscape.management.client.console.Console.main(Unknown Source)
Dan Franciscus
Systems Administrator
Information Technology Group
Institute for Advanced Study
609-734-8138
------------------------------------------------------------------------
*From: *"Mark Reynolds" <mareynol(a)redhat.com>
*To: *"General discussion list for the 389 Directory server
project." <389-users(a)lists.fedoraproject.org>
*Sent: *Tuesday, March 1, 2016 1:27:49 PM
*Subject: *[389-users] Re: Unable to connect to Admin server via
389 windows console
Please run the console in debug mode and post the entire output:
389-console -D 9
On 03/01/2016 01:02 PM, Daniel Franciscus wrote:
We are using SSL, and I am using the latest software.
Dan Franciscus
Systems Administrator
Information Technology Group
Institute for Advanced Study
609-734-8138
------------------------------------------------------------------------
*From: *"Mark Reynolds" <mareynol(a)redhat.com>
*To: *"General discussion list for the 389 Directory server
project." <389-users(a)lists.fedoraproject.org>
*Sent: *Tuesday, March 1, 2016 10:58:16 AM
*Subject: *[389-users] Re: Unable to connect to Admin server
via 389 windows console
Are you using SSL in the Admin Server? If so, you should use
the latest console for Windows:
=======================================================================
389 Windows Console 1.1.15
The 389 Directory Server team is proud to announce
389-console-win version 1.1.15.
Windows installers are available to download from Download 389
Windows Console (32-bit)
<
http://www.port389.org/binaries/389-Console-1.1.15-i386.msi>
and Download 389 Windows Console (64-bit)
<
http://www.port389.org/binaries/389-Console-1.1.15-x86_64.msi>.
Highlights in 389-console-win-1.1.15
* Windows Console now has the same bug fixes and
enhancements made for the Fedora 389-console.
* *A connection failure problem over
**SSL**/start**TLS**was fixed.*
...
...
==========================================================================
Mark
On 03/01/2016 10:02 AM, Daniel Franciscus wrote:
Hello,
I am having an issue connecting to our 389 server, but
only from windows servers it seems. It works fine on a
Windows 7 workstation.
What I have checked:
* Verified connectivity to port 9830
* Verified java version 7.0.90 installed and in the Path
environment variable
* Can ping the hostname of the 389 server
* Tested on two Windows Server 2012 R2 servers
I get the error: Cannot connect to the Admin server
"<server name>" The URL is not correct or the server is
not running.
Dan Franciscus
Systems Administrator
Information Technology Group
Institute for Advanced Study
609-734-8138
--
389 users mailing list
389-users@%(host_name)s
http://lists.fedoraproject.org/admin/lists/389-users@lists.fedoraproject.org
--
389 users mailing list
389-users@%(host_name)s
http://lists.fedoraproject.org/admin/lists/389-users@lists.fedoraproject.org
--
389 users mailing list
389-users@%(host_name)s
http://lists.fedoraproject.org/admin/lists/389-users@lists.fedoraproject.org
--
389 users mailing list
389-users@%(host_name)s
http://lists.fedoraproject.org/admin/lists/389-users@lists.fedoraproject.org
--
389 users mailing list
389-users@%(host_name)s
http://lists.fedoraproject.org/admin/lists/389-users@lists.fedoraproject.org
--
389 users mailing list
389-users@%(host_name)s
http://lists.fedoraproject.org/admin/lists/389-users@lists.fedoraproject.org
--
389 users mailing list
389-users@%(host_name)s
http://lists.fedoraproject.org/admin/lists/389-users@lists.fedoraproject.org