DSCC 6.1 error reading config

Hi,

I deployed DSCC on a dedicated Tomcat host.

i successuflly performed on this machine a dsccsetup initialize

dsccsetup status indicates

Sun java console not initialized

DSCC Agent is registered in Cacao

DSCC REgistry has been created

path of DSCC registry is /opt/sun/var/dscc6/dcc/ads

Port of DSCC registry is 3998

in addition, the tomcat unix user has full access right to the DS and dscc folders

reaching DSCC in a browser, i have the error "Error reading installation configuration"

Error reading installation configuration

An unexpected error occurred while checking the status of the Directory Service Control Center.

Show Details

Hide Details

Install Error Code: 3

Stack:

com.sun.directory.common.slapx.AdmCmdErrorException: /opt/sun/ds6/bin/dsadm info --separator = /opt/sun/var/dscc6/dcc/ads

com.sun.directory.common.slapx.AdmCmd.run(AdmCmd.java:76)

com.sun.directory.common.slapx.AdmCmd.runInfo(AdmCmd.java:148)

com.sun.directory.common.slapx.SlapxCmd.runInfo(SlapxCmd.java:80)

com.sun.directory.dcc.ads.ADSInstall.getSlapxInfo(ADSInstall.java:443)

com.sun.directory.dcc.ads.ADSInstall.isRunning(ADSInstall.java:378)

com.sun.web.admin.directory.dcc.InitSequenceViewBean.getInstallException(InitSe quenceViewBean.java:81)

com.sun.web.admin.directory.dcc.ADSInstallExceptionViewBean.createChild(ADSInst allExceptionViewBean.java:73)

com.iplanet.jato.view.ContainerViewBase.ensureChild(ContainerViewBase.java:187)

com.iplanet.jato.view.ContainerViewBase.getChild(ContainerViewBase.java:541)

com.iplanet.jato.view.ContainerViewBase.beginChildDisplay(ContainerViewBase.jav a:819)

com.iplanet.jato.taglib.TagBase.fireBeginDisplayEvent(TagBase.java:133)

com.sun.web.ui.taglib.common.CCTagBase.fireBeginDisplayEvent(CCTagBase.java:149 )

com.sun.web.ui.taglib.common.CCTagBase.doEndTag(CCTagBase.java:108)

org.apache.jsp.jsp.ADSInstallException_jsp._jspx_meth_cc_005ftext_005f2(ADSInst allException_jsp.java:383)

org.apache.jsp.jsp.ADSInstallException_jsp._jspx_meth_cc_005fpagetitle_005f0(AD SInstallException_jsp.java:228)

org.apache.jsp.jsp.ADSInstallException_jsp._jspx_meth_cc_005fheader_005f0(ADSIn stallException_jsp.java:149)

org.apache.jsp.jsp.ADSInstallException_jsp._jspService(ADSInstallException_jsp. java:74)

org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:98)

javax.servlet.http.HttpServlet.service(HttpServlet.java:803)

org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:328)

org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:315)

org.apache.jasper.servlet.JspServlet.service(JspServlet.java:265)

javax.servlet.http.HttpServlet.service(HttpServlet.java:803)

org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFil terChain.java:269)

org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain .java:188)

org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.jav a:691)

org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispat cher.java:469)

org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher. java:403)

org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.ja va:301)

com.iplanet.jato.view.ViewBeanBase.forward(ViewBeanBase.java:340)

com.iplanet.jato.view.ViewBeanBase.forwardTo(ViewBeanBase.java:261)

com.sun.web.admin.directory.dcc.DCCViewBean.beginDisplay(DCCViewBean.java:186)

com.iplanet.jato.taglib.UseViewBeanTag.doStartTag(UseViewBeanTag.java:149)

org.apache.jsp.jsp.DCC_jsp._jspService(DCC_jsp.java:71)

org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:98)

javax.servlet.http.HttpServlet.service(HttpServlet.java:803)

org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:328)

org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:315)

org.apache.jasper.servlet.JspServlet.service(JspServlet.java:265)

javax.servlet.http.HttpServlet.service(HttpServlet.java:803)

org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFil terChain.java:269)

org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain .java:188)

org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.jav a:691)

org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispat cher.java:469)

org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher. java:403)

org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.ja va:301)

com.iplanet.jato.view.ViewBeanBase.forward(ViewBeanBase.java:340)

com.iplanet.jato.view.ViewBeanBase.forwardTo(ViewBeanBase.java:261)

com.iplanet.jato.ApplicationServletBase.dispatchRequest(ApplicationServletBase. java:981)

com.iplanet.jato.ApplicationServletBase.processRequest(ApplicationServletBase.j ava:615)

com.iplanet.jato.ApplicationServletBase.doGet(ApplicationServletBase.java:459)

javax.servlet.http.HttpServlet.service(HttpServlet.java:690)

javax.servlet.http.HttpServlet.service(HttpServlet.java:803)

org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFil terChain.java:269)

org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain .java:188)

com.sun.web.admin.directory.dcc.solo.DCCSoloSessionManagerFilter.doFilter(DCCSo loSessionManagerFilter.java:251)

org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFil terChain.java:215)

org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain .java:188)

org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java: 210)

org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java: 174)

org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)

org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:117)

org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:10 8)

org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:151)

org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:870)

org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConn ection(Http11BaseProtocol.java:665)

org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:5 28)

org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorke rThread.java:81)

org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:6 85)

java.lang.Thread.run(Thread.java:534)

Help is welcome

[7028 byte] By [Alban_for_SmartWavea] at [2007-11-15]
# 1

in addition the access log of ads ldap servers indicates no error

[04/Jul/2007:16:31:33 +0200] conn=0 op=-1 msgId=-1 - fd=18 slot=18 LDAP connection from 127.0.0.1:49356 to 127.0.0.1

[04/Jul/2007:16:31:33 +0200] conn=0 op=0 msgId=1 - BIND dn="cn=Directory Manager" method=128 version=3

[04/Jul/2007:16:31:33 +0200] conn=0 op=0 msgId=1 - RESULT err=0 tag=97 nentries=0 etime=0 dn="cn=directory manager"

[04/Jul/2007:16:31:33 +0200] conn=0 op=1 msgId=2 - SRCH base="cn=config" scope=0 filter="(objectClass=*)" attrs="nsslapd-config-magic"

[04/Jul/2007:16:31:33 +0200] conn=0 op=1 msgId=2 - RESULT err=0 tag=101 nentries=1 etime=0

[04/Jul/2007:16:31:33 +0200] conn=0 op=2 msgId=3 - SRCH base="cn=plugins,cn=config" scope=2 filter="(&(objectClass=nsSlapdPlugin)(cn=Pass Through Authentication))" attrs=ALL

[04/Jul/2007:16:31:33 +0200] conn=0 op=2 msgId=3 - RESULT err=0 tag=101 nentries=1 etime=0

[04/Jul/2007:16:31:33 +0200] conn=0 op=3 msgId=4 - SRCH base="cn=pass through authentication,cn=plugins,cn=config" scope=0 filter="(objectClass=*)" attrs=ALL

[04/Jul/2007:16:31:33 +0200] conn=0 op=3 msgId=4 - RESULT err=0 tag=101 nentries=1 etime=0

[04/Jul/2007:16:31:33 +0200] conn=0 op=4 msgId=5 - SRCH base="cn=plugins,cn=config" scope=2 filter="(&(objectClass=nsSlapdPlugin)(cn=Pass Through Authentication))" attrs=ALL

[04/Jul/2007:16:31:33 +0200] conn=0 op=4 msgId=5 - RESULT err=0 tag=101 nentries=1 etime=0

[04/Jul/2007:16:31:33 +0200] conn=0 op=5 msgId=6 - SRCH base="cn=pass through authentication,cn=plugins,cn=config" scope=0 filter="(objectClass=*)" attrs=ALL

[04/Jul/2007:16:31:33 +0200] conn=0 op=5 msgId=6 - RESULT err=0 tag=101 nentries=1 etime=0

[04/Jul/2007:16:31:33 +0200] conn=0 op=6 msgId=7 - MOD dn="cn=Pass Through Authentication,cn=plugins,cn=config"

[04/Jul/2007:16:31:33 +0200] conn=0 op=6 msgId=7 - RESULT err=0 tag=103 nentries=0 etime=0,

[04/Jul/2007:16:31:33 +0200] conn=0 op=7 msgId=8 - SRCH base="" scope=0 filter="(objectClass=*)" attrs="aci"

[04/Jul/2007:16:31:33 +0200] conn=0 op=7 msgId=8 - RESULT err=0 tag=101 nentries=1 etime=0

[04/Jul/2007:16:31:33 +0200] conn=0 op=8 msgId=9 - UNBIND

[04/Jul/2007:16:31:33 +0200] conn=0 op=8 msgId=-1 - closing from 127.0.0.1:49356 - U1 - Connection closed by unbind client -

Alban_for_SmartWavea at 2007-7-12 > top of java,Web & Directory Servers,Directory Servers...
# 2
Can you try to run "/opt/sun/ds6/bin/dsadm info --separator = /opt/sun/var/dscc6/dcc/ads" and look at the error code ?Can you also give the cacao log (should be under /var/opt/sun/cacao/instances/default/logs/) ?Regards,Carole
chebrarda at 2007-7-12 > top of java,Web & Directory Servers,Directory Servers...
# 3

Thanks Carole, your advice was good

the war file runs on Tomcat on the host named srvtomcat

the ds is running on srvds6

on srvtomcat

./dsadm info --separator = /opt/sun/var/dscc6/dcc/ads

instance-path=/opt/sun/var/dscc6/dcc/ads

owner=ldapusr(ldapgrp)

port=3998

secure-port=3999

bit-format=32-bit

state=running

server-pid=9308

dscc-url=ldap://srvds6:3998

layout-tag=D-A00

I think that it should be

dscc-url=ldap://srvtomcat:3998

so now, the question is "how to change it?"

Alban_for_SmartWavea at 2007-7-12 > top of java,Web & Directory Servers,Directory Servers...
# 4

additional info

reading the srvtomcat conf directory with ldap, i can find a single entry that looks good.

dn: cn=srvtomcat@/opt/sun/var/dscc6/dcc/ads,cn=Servers,cn=dscc

secureport: 3999

port: 3998

servertype: ADS

instanceowner: ldapusr

objectClass: extensibleobject

objectClass: top

description: DS instance used as the DSCC registry

cn: srvtomcat@/opt/sun/var/dscc6/dcc/ads

so the issue is probably as in the previous reply

(dscc-url=ldap://srvds6:3998)

Alban_for_SmartWavea at 2007-7-12 > top of java,Web & Directory Servers,Directory Servers...
# 5

Even if the dscc-url is wrong, it cannot be the root cause of your problem.

Analysing deeper your error, it seems that DSCC has an access denied error while executing dsadm info. Has your output of dsadm info been executed as the tomcat user ? If not, can you try with this particular user ? Is the tomcat user ldapusr(ldapgrp) ?

Back to the wrong dscc-url, did you generate the DSCC registry on srvds6 ? Are srvds6 and srvtomcat 2 different hosts or 2 interfaces of the same host ? Did you register the DSCC registry in a DSCC on srvds6 ? In any case, you can modify it by running on srvtomcat :

dsccreg add-server /opt/sun/var/dscc6/dcc/ads

Carole.

chebrarda at 2007-7-12 > top of java,Web & Directory Servers,Directory Servers...
# 6

tomcat user is member of ldapgrp (like ldapusr).

the outpout was done with ldapusr and not tomcat user

DSCC was generated once on srvds6 and then once on srvtomcat that are 2 distinct hosts

the war come from the srvds6 host and was copied to srvtomcat

on srvtomcat with tomcat user, the output is

./dsadm info --separator = /opt/sun/var/dscc6/dcc/ads

instance-path=/opt/sun/var/dscc6/dcc/ads

owner=ldapusr(ldapgrp)

port=access-denied

secure-port=access-denied

bit-format=32-bit

state=access-denied

server-pid=9308

dscc-url=ldap://srvds6:3998

layout-tag=D-A00

the "access-denied" indicates the issue

How to fix it?

Alban_for_SmartWavea at 2007-7-12 > top of java,Web & Directory Servers,Directory Servers...
# 7

Currently, DSEE does only support configuration whereTomcat user and DSCC registry user are identical.

To fix your issue, you have to recreate your DSCC registry:

logged as ldapusr run:

<install_path>/dscc6/bin/dsccsetup ads-delete

logged as tomcat user:

<install_path>/dscc6/bin/dsccsetup ads-create

At this stage, dsadm info should no longer report access-denied.

But then you will probably have another issue. The war file you deployed in Tomcat should come from the host where Tomcat is installed. So remove the webapp you deploy and replace it by the <install_path>/var/dscc6/dscc.war from srvtomcat.

chebrarda at 2007-7-12 > top of java,Web & Directory Servers,Directory Servers...
# 8
Hi,Based on your remarks, I uninstall all and then restart all installation process from scratch using the tomcat user including redeploying DSEE.I used the WAR generated on the Tomcat host.All was fine at the first try.MANY THANKS!!!!!!!!!Alban
Alban_for_SmartWavea at 2007-7-12 > top of java,Web & Directory Servers,Directory Servers...