Quantcast
Channel: Micro Focus Forums
Viewing all 11924 articles
Browse latest View live
↧

Access Manager disconnect error every 15 seconds

August 6, 2017, 9:03 am
$
0
0
Good morning, I have two servers with the following specifications:

Server 1:
Applications:
Access Manager 4.3: Identity Server and Administration Console
OS (Operating System)
SLES (Suse Linux Enterprise server) 12 SP1

Server 2:
Applications:
Access Gateway Appliance 4.3

In the error_log file of the Access Gateway every 15 seconds or so, the following error is generated that disconnects the user. Someone can help me figure out the cause.

Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [info] Inside isDummyConnection
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [info] ipaddrss = 127.0.0.1
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug] ../prerror.cpp(637): AM#604600000 AMDEVICEID#ag-AB763D28E99A9BC5: AMAUTHID#e3b0c44298fc1c149afbf4c8996fb92427ae41e46 49b934ca495991b7852b855: AMEVENTID#19: Requ: GET http://a.com:8181/IDPUpdate service:soapbc (127.0.0.1:48418->127.0.0.1:8181)
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug] mod_headers.c(781): headers: ap_headers_error_filter()
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug] ../AGFilterPolicy.cpp(27): AMEVENTID#19: CFilter AgFilterPolicy Initialized
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug] ../AGRegexAutoFilter.cpp(31): AMEVENTID#19: CFilter AgRegexAuto Compare Initialized
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug] ../AGRegexAutoFilter.cpp(42): AMEVENTID#19: CFilter AgRegexAuto No extension Matched the Uri
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug] ../AGFilterPolicy.cpp(33): AMEVENTID#19: CFilter AgFilterPolicy match returned false
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug] ../AGFilterPolicy.cpp(38): AMEVENTID#19: CFilter AgFilterPolicy no match found
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug] ../AGFilterPolicy.cpp(27): AMEVENTID#19: CFilter AgFilterPolicy Initialized
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug] ../AGRegexAutoFilter.cpp(31): AMEVENTID#19: CFilter AgRegexAuto Compare Initialized
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug] ../AGRegexAutoFilter.cpp(42): AMEVENTID#19: CFilter AgRegexAuto No extension Matched the Uri
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug] ../AGFilterPolicy.cpp(33): AMEVENTID#19: CFilter AgFilterPolicy match returned false
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug] ../AGFilterPolicy.cpp(38): AMEVENTID#19: CFilter AgFilterPolicy no match found
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [debug] ../prerror.cpp(637): AM#604600001 AMDEVICEID#ag-AB763D28E99A9BC5: AMAUTHID#e3b0c44298fc1c149afbf4c8996fb92427ae41e46 49b934ca495991b7852b855: AMEVENTID#19: status:200 GET http://a.com:8181/IDPUpdate <e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca 495991b7852b855> X-Mag: <AB763D28E99A9BC5;c9533cd3;19;FPE->0;> [127.0.0.1:48418->127.0.0.1:8181]service:soapbc (2400:0) -
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [error] AMEVENTID#19: ID:19:2400:cres status:200 200 OK
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [error] AMEVENTID#19: ID:19:2400:cres Strict-Transport-Security: max-age=31536000;includeSubDomains
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [error] AMEVENTID#19: ID:19:2400:cres X-Mag: AB763D28E99A9BC5;c9533cd3;19;FPE->0;
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [error] AMEVENTID#19: ID:19:2400:cres Via: 1.1 soap.backchannel (Access Gateway-ag-AB763D28E99A9BC5-19)
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [error] AMEVENTID#19: ID:19:2400:cres Content-Length: 497
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [error] AMEVENTID#19: ID:19:2400:cres Connection: close
Aug 4 17:03:04 SV934IdmMagDev httpd[89650]: [error] AMEVENTID#19: ID:19:2400:cres Content-Type: text/html; charset=iso-8859-1
Aug 4 17:03:06 SV934IdmMagDev httpd[87180]: [debug] ../health_thread.cpp(165): Bind address is not configured
Aug 4 17:03:06 SV934IdmMagDev httpd[87180]: [debug] ../health_thread.cpp(192): tcp_non_block_connect()- connection is in process 10.213.81.8
Aug 4 17:03:06 SV934IdmMagDev httpd[87180]: [debug] ../health_thread.cpp(222): totalworkers: 1
Aug 4 17:03:08 SV934IdmMagDev httpd[87180]: [debug] ../health_thread.cpp(318): tcp connection closed: worker:10.213.81.8
Aug 4 17:03:08 SV934IdmMagDev httpd[87180]: [debug] ../health_thread.cpp(544): health_check()-size of health_response is 391
↧
Search

RBPM Trusted Root certificate expired

August 6, 2017, 4:44 pm
$
0
0
Hi,

I had an issue that presented itself over the weekend. IDM user app just stopped authenticating with eDir for some reason - with the following error "Identity Manager authentication is not correctly configured or Identity Manager to eDirectory SAML communication is not functioning correctly. Please contact an administrator to correct the problem."

I have logged a HIGH Priority SR with NetiQ but am still awaiting a response...

My analysis this morning has I believe identified the culprit. As part of the installation / configuration of the RBPM to eDirectory SAML component of configudate.sh it creates a self-signed certificate and stores it in:

RBPMTrustedRootContainer.Security

That self-signed certificate appears to have expired on Friday evening @ 1713Hrs.
Now, I'm not sure how we can renew this cert? I couldn't find any literature on how to do it properly. A previous post on here which was left unanswered indicated that you could modify the XMLData directly but surely that is not the Official fix.

Additionally there is no advice on how you should generate the new replacement cert as the existing Cert was created by the installation package.

We are running IDM v4.5.1 SP1.

Any help you can provide would be much appreciated.

Kind regards
Steve
↧
↧

Strange proxy issue.

August 7, 2017, 12:10 am
$
0
0
Hi All,
We have found the following issue and can't work out why this is happening.
We have a mailbox which other users proxy into. Each proxy user has full rights.
From the main account without proxying in, mail can be opened with out problems.
If a user proxies into the mailbox they can open mail without any issues.
If a proxy user searches the mailbox for a particular message and opens the email it opens as if its being replied to.
This only happens if the mail has been searched for via ctrl + f or the search window.

Groupwise server is up to date and client is 14.2.2

Thanx

Julian
↧

Attribute names different in imanager and LDAP -JDBC Driver

August 7, 2017, 2:20 am
$
0
0
Hi
I have created and deployed a JDBC driver for creating application roles into IDM from the database table.
I created 5 attributes respective to table coloumns using i-manager schema option and mapped these attributes in JDBC driver schema mapping.
IDM Attribute Names:

IDM_Accounts(Auxillary Class)
ABC_ACC_NAME
ABC_ACC_DESC
ABC_ACC_STATUS
ABC_CUST_NAME
ABC_CUST_TYPE

But once the roles are getting created in IDM, the attributes are changed to as follows. Underscores are removed and the first letter changed the case.
This is the case in both LDAP and apache directory studio, but it looks perfect in imanager.
aBCACCNAME
aBCACCDESC
aBCACCSTATUS
aBCCUSTNAME
aBCCUSTTYPE

We are not able to design workflow for the respective system because to perform query in workflow we are not able to use the "ABC_ACC_NAME" type attributes and its accepting only the "aBCACCNAME" type attributes which is being shown in Ldap. This is the issue in both development as well as production.

Please help

Thanks
Rohith
↧

UserApp 4.5 / Custom Entitlement in Active Directory Driver

August 7, 2017, 4:10 am
$
0
0
Hi,

I would like to create a resource in the UserApplication and bind it to a custom valueless entitlement in an Active Directory driver.
However, after creating the resource I am not able to pick the desired entitlement from the selection dialog, as it does not appear there, even after performing a manual entitlement query refresh / UserApp restart.
I then tried to manually add the correct nrfEntitlementRef attribute to the resource object. Then the UserApp correctly displays the entitlement's display name in the resource, but when trying to add the resource to a role, the following error message appears:

Error: Failed to get resource:500 Internal Server Error Service method 'public abstract com.novell.srvprv.impl.gwt.client.model.nrf.Resour ce com.novell.srvprv.impl.gwt.client.IGwtServiceRoute r.getPrettyResource(java.lang.String) throws com.novell.srvprv.impl.gwt.client.model.nrf.GwtNrf Exception' threw an unexpected exception: java.lang.NullPointerException

Do I maybe need to do more than just create an entitlement object before the UserApp can correctly detect it?
Does it maybe maybe require some information in the 'entitlementConfiguration' object in the driver?

Thanks in advance for any hint!
↧
↧

help with update to novell 6.5 server

August 7, 2017, 11:10 am
$
0
0
We run a Novell 6.5 server. I usually upgrade the drives every two years as a matter of proactive maintenance. However, the last time I did that, the new drives created more problems than the old drives, so I skipped the last cycle. So my last update was in 2013.

I would be interested in some suggestions on what the most critical patches that I should run in this update cycle. We generally only use this server for internal documents, so no Internet remote access. We even disconnected from the Internet when we leave the office at night.

We run a RAID1, so we have two mirrored drives. I make a point to keep the bootable partitions up to date on each drive with the idea that either drive can become a new boot drive during a failure. I usually keep one drive available to boot in a backup server. Overall, it has been reliable over the years.

When I add the new drives, I usually break the mirror, then boot from one drive, then mirror in a new drive. I have the system relatively down pat.

In this upgrade cycle, I wanted to try to put the drive into some newer hardware. The backup drive failed to boot. I imagine there are some drivers that I need to load that would be available as part of whatever upgrade I do. Some insight on this would be helpful.

I also noticed that after I try to boot on the new hardware, and that boot fails, the drive no longer boots in the known to be good hardware. I am thinking that I should copy the NW server folder to some sort of backup, then if I get a failed boot, I can just copy over the NW server files. Is that how this works?

Any tips would be appreciated.

Chris
↧

LDAP driver problems with entitlements groups

August 7, 2017, 12:37 pm
$
0
0
Hi, i've the following problem with a ldap driver when i wanna use the entitlement groups.
I created and deployed a ldap driver to connect with OID. But when i want bring entitlements groups these not appears.
I activate the property DirXML-EntitlementRef in filter and Use Group Entitlement of global configuration value but happened nothing.
Also i tried create, how says the documentation (https://www.netiq.com/documentation/...a/bfnrkdw.html), the entitlements manually but entitlement query settings does not recognize it.

Anybody had this problem? can you help me?
↧

ZENWorks 17.1 causing explorer to crash on Windows 10 1703

August 7, 2017, 4:46 pm
$
0
0
Hi all,

Banging my head against the wall with this one. I'm seeing an explorer.exe crash with ZENWorks 17.1 on our Windows 10 1703 machines.

According to event viewer the crash is being caused by shell32.dll as per the following two events

Code:
Application: explorer.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Code:
Faulting application name: explorer.exe, version: 10.0.15063.447, time stamp: 0x951324bb
Faulting module name: SHELL32.dll, version: 10.0.15063.502, time stamp: 0x944613c6
Exception code: 0xc0000005
Fault offset: 0x0000000000074a0a
Faulting process id: 0x2054
Faulting application start time: 0x01d30f43e1426084
Faulting application path: C:\windows\explorer.exe
Faulting module path: C:\windows\System32\SHELL32.dll
However this crash only seems to be occurring both on a user login when the ZAPP launcher appears in the system tray, as well as during an agent refresh. I can also trigger it at will by logging out of the ZENWorks agent (right click -> sign out) while logged into Windows as well as logging in to the ZENWorks agent (right click -> sign in).

Essentially on logging out and logging in explorer closes itself, then starts again. Sometimes I get double the icons in the system tray, but thats not consistent. In the worst case explorer doesn't restart itself at all.

To reiterate, if I remove the ZENWorks agent, the crashes do not occur.

The following seems to be pretty common on every refresh ...

[DEBUG] [08/08/2017 08:38:16.010] [3316] [ZenworksWindowsService] [119] [] [AppCallbackManager] [] [Exception in refreshevent. Retry count - 1 Exception message - Failed to connect to an IPC Port: The system cannot find the file specified.
] [] [] [] [ZENworks Agent]
[DEBUG] [08/08/2017 08:38:17.011] [3316] [ZenworksWindowsService] [119] [] [AppCallbackManager] [] [Exception in refreshevent. Retry count - 2 Exception message - Failed to connect to an IPC Port: The system cannot find the file specified.
] [] [] [] [ZENworks Agent]
[DEBUG] [08/08/2017 08:38:18.512] [3316] [ZenworksWindowsService] [119] [] [AppCallbackManager] [] [Exception in refreshevent. Retry count - 3 Exception message - Failed to connect to an IPC Port: The system cannot find the file specified.
] [] [] [] [ZENworks Agent]

Here is the crashing in action ...

https://www.youtube.com/watch?v=3QUSsZ3NSFE

The following link is a full debug log of the time during the above logout and login. Looks like the ZEN client bugged out with the timestamps in the log file, so I'm including the whole thing.

https://pastebin.com/raw/1injFsC1

Anyone able to provide some insights? An SR is not possible due to us being on an education pricing subscription which doesn't include SRs.
↧
Search

PRD info/help function

August 8, 2017, 12:21 am
$
0
0
Hi there,

For a customer I would like to add the option to an help function behind each form field. I would like to add an little image which opens a popup displaying information about the particular field.

Has anyone done something like this?

Thanks in advance,

Nick
↧
↧

PRD with expensive query

August 8, 2017, 12:32 am
$
0
0
Hi!

I would like to have your opinion in a matter. I have created a PRD in which there is a datebox. The datebox triggers a query which looks for a the accounts which will expire before this selected date. Depening on the selected date this could take a while (read minutes). In the meantime the only thing is shown while the query is executing is the datebox, the screen becomes frozen until results are shown.

Is there a way to show a loading screen in the meantime? Of do you happen to know a way to do this differently?

Have you ran into the same situation once?

Thanks in advance!
↧

IDM 4.6 and SLES12 SP3

August 8, 2017, 12:50 am
↧

Your IMAP server wants to alert you...

August 8, 2017, 3:31 am
$
0
0
How can I get around this ?

Your IMAP server wants to alert you to the following: GroupWisemessage limit reached.
↧

Dead Netware server

August 8, 2017, 5:57 am
$
0
0
While I was on vacation one of our Netware servers failed and will not boot. The server had a copy of a replica.

I do not need to bring the server back. So what is the best way remove the server from the replica ring? Do I just go to the master of the ring and remove it?

Thanks
Phil Jannusch
↧
↧

Diagnostics page empty

August 8, 2017, 7:07 am
$
0
0
Hi all,

After upgrading from zcm 11.2.4. to 11.3.0a and then to 11.3.1 the diagnostics page for the primary server is empty with the probe showing installed. A few things I've tried:
1. created new certificate in yast (old one was expired). Of note here is the domain was changed on the certificate.
2. Followed TID 7015138. Also tried modifying /etc/opt/novell/zenworks/probe.properties as it showed the old domain in the URL.
3. Deleting and recreating the probe.

Agent communication to the server is working fine.

Thanks for any assistance.

Here is the a portion of the info from zcc.log:
[DEBUG] [08/08/2017 09:52:16.443] [4895] [ZENServer] [110] [zenworks] [ZCC] [Exception while getting ZEN_SERVER information from server : zcm1] [com.novell.zenworks.admin.pages.diagnostics.except ions.ZENDiagnosticsException: Exception while initiatlizing connection to "zcm1" for Service : ZEN_SERVER
at com.novell.zenworks.admin.pages.diagnostics.Diagno sticsDataCollector.getProcessHealthInfoFromServer( DiagnosticsDataCollector.java:367)
at com.novell.zenworks.admin.pages.diagnostics.Diagno sticsDataCollector.getProcessHealthInfo(Diagnostic sDataCollector.java:299)
at com.novell.zenworks.admin.pages.diagnostics.Diagno sticsDataCollector.getServerHealthInfo(Diagnostics DataCollector.java:130)
at com.novell.zenworks.admin.pages.diagnostics.Diagno sticsInfoCollectorThread.run(DiagnosticsInfoCollec torThread.java:63)
Caused by: java.io.IOException: Failed to retrieve RMIServer stub: javax.naming.NameNotFoundException: jmxrmi
at javax.management.remote.rmi.RMIConnector.connect(R MIConnector.java:358)
at javax.management.remote.JMXConnectorFactory.connec t(JMXConnectorFactory.java:268)
at com.novell.zenworks.admin.pages.diagnostics.MBeanC lient.getConnection(MBeanClient.java:83)
at com.novell.zenworks.admin.pages.diagnostics.Diagno sticsDataCollector.getProcessHealthInfoFromServer( DiagnosticsDataCollector.java:327)
... 3 more
Caused by: javax.naming.NameNotFoundException: jmxrmi
at com.sun.jndi.rmi.registry.RegistryContext.lookup(R egistryContext.java:116)
at com.sun.jndi.toolkit.url.GenericURLContext.lookup( GenericURLContext.java:203)
at javax.naming.InitialContext.lookup(InitialContext. java:411)
at javax.management.remote.rmi.RMIConnector.findRMISe rverJNDI(RMIConnector.java:1925)
at javax.management.remote.rmi.RMIConnector.findRMISe rver(RMIConnector.java:1892)
at javax.management.remote.rmi.RMIConnector.connect(R MIConnector.java:275)
... 6 more
] [Exception while initiatlizing connection to "zcm1" for Service : ZEN_SERVER] [] [com.novell.zenworks.admin.pages.diagnostics.except ions.ZENDiagnosticsException] [ZENServer]
[DEBUG] [08/08/2017 09:52:16.562] [4895] [ZENServer] [110] [zenworks] [ZCC] [Exception while getting ZEN_LOADER information from server : zcm1] [com.novell.zenworks.admin.pages.diagnostics.except ions.ZENDiagnosticsException: Exception while initiatlizing connection to "zcm1" for Service : ZEN_LOADER
at com.novell.zenworks.admin.pages.diagnostics.Diagno sticsDataCollector.getProcessHealthInfoFromServer( DiagnosticsDataCollector.java:367)
at com.novell.zenworks.admin.pages.diagnostics.Diagno sticsDataCollector.getProcessHealthInfo(Diagnostic sDataCollector.java:299)
at com.novell.zenworks.admin.pages.diagnostics.Diagno sticsDataCollector.getServerHealthInfo(Diagnostics DataCollector.java:130)
at com.novell.zenworks.admin.pages.diagnostics.Diagno sticsInfoCollectorThread.run(DiagnosticsInfoCollec torThread.java:63)
Caused by: java.io.IOException: Failed to retrieve RMIServer stub: javax.naming.NameNotFoundException: jmxrmi
at javax.management.remote.rmi.RMIConnector.connect(R MIConnector.java:358)
at javax.management.remote.JMXConnectorFactory.connec t(JMXConnectorFactory.java:268)
at com.novell.zenworks.admin.pages.diagnostics.MBeanC lient.getConnection(MBeanClient.java:83)
at com.novell.zenworks.admin.pages.diagnostics.Diagno sticsDataCollector.getProcessHealthInfoFromServer( DiagnosticsDataCollector.java:327)
... 3 more
Caused by: javax.naming.NameNotFoundException: jmxrmi
at com.sun.jndi.rmi.registry.RegistryContext.lookup(R egistryContext.java:116)
at com.sun.jndi.toolkit.url.GenericURLContext.lookup( GenericURLContext.java:203)
at javax.naming.InitialContext.lookup(InitialContext. java:411)
at javax.management.remote.rmi.RMIConnector.findRMISe rverJNDI(RMIConnector.java:1925)
at javax.management.remote.rmi.RMIConnector.findRMISe rver(RMIConnector.java:1892)
at javax.management.remote.rmi.RMIConnector.connect(R MIConnector.java:275)
... 6 more
↧

Some Bundles Not Showing up on Taskbar in Win7?

August 8, 2017, 7:42 am
$
0
0
I have a Windows Explorer and Google Chrome bundle assigned to the ZENWorks folder and the taskbar of our Windows 7 machines. On some machines, the Chrome bundle doesn't appear to be showing up in the taskbar, but it does exist in the ZENWorks folder and can be launched from there. It shows Windows View and Taskbar as check marked in the Technician Application. Is anybody else experiencing this?
↧
Search

E-mail from Word (Office 365)

August 8, 2017, 7:46 am
$
0
0
Just recently moved from Office 2013 without OutLook installed to Office 2016(O365) with Outlook deployed. I have several end users that used the Share > E-mail function to send out the word document they were working on to people without opening GroupWise and sending it through that method. The function worked on the previous method without outlook installed. I don't know if O365 has done something different with the function or if the presents of Outlook is conflicting but this is no longer working.

When using the function within word I get "Word couldn't send mail because of MAPI failure: 'Unspecified error'."

I have redirected those tyring this to just attached with GroupWise instead. But this would be a nice thing to get working for them.

Any ideas?

Thanks

Richard
↧

Best Practice Windows 10 and Roaming Profile

August 8, 2017, 10:08 am
$
0
0
Does anyone like to share their best practices for Windows 10 and roaming profiles ?

I have problems profiles loosing their Start Menu / Search / Action Centre
Loosing Default App Settings
Breaking the entire profiles.

Hypothese : could it be that Windows 10 needs to individually upgrade each profile ?
If so ; How can one upgrade the profile manually ?
↧
↧

External Certificate for EUP and Exchange, with Internal CA?

August 8, 2017, 11:05 am
$
0
0
Hi there,

I have a wildcard certificate issued by an external CA that I would like to use for all the user facing services.
But would like to keep the internal CA issuing all the other certificates.
Is this possible without using a reverse proxy?

Thanks.
↧

Add header to the top of the delimited text driver output

August 8, 2017, 11:59 am
$
0
0
How to include header (fields names) to the csv file that is generated by delimited text driver?

Thanks.
↧

Switch User doesn't show tiles for logged in users

August 8, 2017, 12:10 pm
$
0
0
I installed Client for OES 2 SP4 (IR6) on a couple of computers today in order to start comparing to our current version OES 2 SP4 (IR1). When multiple users are logged in to one computer, the switch user option no longer shows any tiles for the logged in users. Is this working as designed? If not, can anyone help me find what settings I need to make in order for "switch user" then CTL-ALT-DEL to show the logged in user tiles so that I can click on the desired logged in user -- as was the case with client version IR1.
↧
Viewing all 11924 articles
Browse latest View live
Search
<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>