Robert,

I too have noticed the bug in the 1.2.7 series, but haven't had time
to report in a meaningful manner. FYI I have found that when it tells
you don't have permission and asks you to re-auth if you click cancel
it will let you move forward but if you do re-auth it will lock you
out of the first item of the configuration tab. Let me know if that
also is a work around for you.

-- Jazcek Braden

On Wed, Dec 22, 2010 at 1:26 PM, Robert Viduya
<robert+fds@shangri-la.ts.gatech.edu> wrote:
>
> On Dec 21, 2010, at 8:17 PM, Marc Sauton wrote:
>
>> Check the access log file for the bind attempts, and
>> nsslapd-allow-anonymous-access in your dse.ldif
>> Try to click OK and provide pw if prompted again.
>> May be related to these reports:
>> https://bugzilla.redhat.com/show_bug.cgi?id=627906
>> https://bugzilla.redhat.com/show_bug.cgi?id=661116
>> If it the case, you may want to add a comment.
>
> The access log shows a number of bind requests, one to dn="" and the rest to dn="cn=directory manager". *All of them were successful (err=0). *Nsslapd-allow-anonymous-access is "on".
>
> On Dec 22, 2010, at 2:16 PM, Aaron Hagopian wrote:
>
>> I think you're supposed to login to the 389-console with the admin user not your directory manager.
>
> I get the same error with the admin user. *I've been managing a Fedora directory cluster for years now and have always used Directory Manager. *Is this something new?
> --
> 389 users mailing list
> 389-users@lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/389-users
>



--
Jazcek Braden
--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users

On Dec 22, 2010, at 3:34 PM, Jazcek Braden wrote:

> Robert,
>
> I too have noticed the bug in the 1.2.7 series, but haven't had time
> to report in a meaningful manner. FYI I have found that when it tells
> you don't have permission and asks you to re-auth if you click cancel
> it will let you move forward but if you do re-auth it will lock you
> out of the first item of the configuration tab. Let me know if that
> also is a work around for you.
>
> -- Jazcek Braden

I can click cancel and it will then let me look at the first item of the configuration tab (the server name). However, it still won't let me configure SSL encryption under the Encryption Tab. I can click the "Enable SSL for this server" checkbox, but "Save" button at the bottom never lights up. It's also supposed to allow me to select a cipher family and a security device and what certificate to use, but none of those ever show up.
--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users

Robert Viduya <robert+fds <at> shangri-la.ts.gatech.edu> writes:

>
> I'm having problems trying to get a clean install of 1.2.7.5 working. We're
> running RHEL5 and I have the
> EPEL5.4 repositories configured on it. Yum installed the following when I
> installed 389-ds:
>
> 389-admin.x86_64 1.1.13-1.el5
> 389-admin-console.noarch 1.1.5-1.el5
> 389-admin-console-doc.noarch 1.1.5-1.el5
> 389-adminutil.x86_64 1.1.8-4.el5
> 389-console.noarch 1.1.4-1.el5
> 389-ds.noarch 1.2.1-1.el5
> 389-ds-base.x86_64 1.2.7.5-1.el5
> 389-ds-base-devel.x86_64 1.2.7.5-1.el5
> 389-ds-console.noarch 1.2.3-1.el5
> 389-ds-console-doc.noarch 1.2.3-1.el5
> 389-dsgw.x86_64 1.1.5-1.el5
> idm-console-framework.noarch 1.1.5-4.el5
>
> After installation, I ran /usr/sbin/setup-ds-admin.pl to set up the initial
> configuration.
> Immediately after that, if I run 389-console, login as
> "cn=Directory Manager", navigate to "Directory Server"
> window and then try to open the "Configuration" tab, I get a dialog
> box that says: "Insufficient Permissions / The user cn=Directory Manager
> does not have permission to perform this operation.".
> Clicking the OK button gets me a new login window, but re-entering the
> Directory Manager credentials doesn't do anything. All I get is a blank
> page instead of what's supposed to be under the Configuration tab.
>


<snip>

I'm curious if there has been any update on this issue. I'm seeing the exact
same behavior on a new install and it's preventing me from getting SSL
configured. I can't get to that configuration tab without getting the Java
NPE and the login prompt. Re-logging in doesn't help, and it matters not
whether I use directory manager or admin.

I'm on slightly newer versions:
389-ds-console-1.2.3-1.el5
389-ds-base-devel-1.2.8-0.2.a2.el5
389-ds-1.2.1-1.el5
389-adminutil-1.1.13-1.el5
389-admin-1.1.14-1.el5
389-admin-console-1.1.5-1.el5
389-dsgw-1.1.6-1.el5
389-admin-console-doc-1.1.5-1.el5
389-adminutil-devel-1.1.13-1.el5
389-console-1.1.4-1.el5
389-ds-base-1.2.8-0.2.a2.el5

Has anyone found a workaround?

Thank you.



--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users

On 02/24/2011 09:09 AM, Roy McMorran wrote:
> Robert Viduya<robert+fds<at> shangri-la.ts.gatech.edu> writes:
>
>> I'm having problems trying to get a clean install of 1.2.7.5 working. We're
>> running RHEL5 and I have the
>> EPEL5.4 repositories configured on it. Yum installed the following when I
>> installed 389-ds:
>>
>> 389-admin.x86_64 1.1.13-1.el5
>> 389-admin-console.noarch 1.1.5-1.el5
>> 389-admin-console-doc.noarch 1.1.5-1.el5
>> 389-adminutil.x86_64 1.1.8-4.el5
>> 389-console.noarch 1.1.4-1.el5
>> 389-ds.noarch 1.2.1-1.el5
>> 389-ds-base.x86_64 1.2.7.5-1.el5
>> 389-ds-base-devel.x86_64 1.2.7.5-1.el5
>> 389-ds-console.noarch 1.2.3-1.el5
>> 389-ds-console-doc.noarch 1.2.3-1.el5
>> 389-dsgw.x86_64 1.1.5-1.el5
>> idm-console-framework.noarch 1.1.5-4.el5
>>
>> After installation, I ran /usr/sbin/setup-ds-admin.pl to set up the initial
>> configuration.
>> Immediately after that, if I run 389-console, login as
>> "cn=Directory Manager", navigate to "Directory Server"
>> window and then try to open the "Configuration" tab, I get a dialog
>> box that says: "Insufficient Permissions / The user cn=Directory Manager
>> does not have permission to perform this operation.".
>> Clicking the OK button gets me a new login window, but re-entering the
>> Directory Manager credentials doesn't do anything. All I get is a blank
>> page instead of what's supposed to be under the Configuration tab.
>>
>
> <snip>
>
> I'm curious if there has been any update on this issue. I'm seeing the exact
> same behavior on a new install and it's preventing me from getting SSL
> configured. I can't get to that configuration tab without getting the Java
> NPE and the login prompt. Re-logging in doesn't help, and it matters not
> whether I use directory manager or admin.
>
> I'm on slightly newer versions:
> 389-ds-console-1.2.3-1.el5
> 389-ds-base-devel-1.2.8-0.2.a2.el5
> 389-ds-1.2.1-1.el5
> 389-adminutil-1.1.13-1.el5
> 389-admin-1.1.14-1.el5
> 389-admin-console-1.1.5-1.el5
> 389-dsgw-1.1.6-1.el5
> 389-admin-console-doc-1.1.5-1.el5
> 389-adminutil-devel-1.1.13-1.el5
> 389-console-1.1.4-1.el5
> 389-ds-base-1.2.8-0.2.a2.el5
>
> Has anyone found a workaround?
If you are referring to https://bugzilla.redhat.com/show_bug.cgi?id=661116

You get an error, but you should be able to just ignore the error and
proceed anyway.

There is a fix in updates testing which should be hitting the mirrors
today or tomorrow.
> Thank you.
>
>
>
> --
> 389 users mailing list
> 389-users@lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/389-users

--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users

On 2/24/11 11:35 AM, Rich Megginson wrote:
> On 02/24/2011 09:09 AM, Roy McMorran wrote:
>> <snip>
>>
>> I'm curious if there has been any update on this issue. I'm seeing
>> the exact
>> same behavior on a new install and it's preventing me from getting SSL
>> configured. I can't get to that configuration tab without getting
>> the Java
>> NPE and the login prompt. Re-logging in doesn't help, and it matters
>> not
>> whether I use directory manager or admin.
>>
>> I'm on slightly newer versions:
>> 389-ds-console-1.2.3-1.el5
>> 389-ds-base-devel-1.2.8-0.2.a2.el5
>> 389-ds-1.2.1-1.el5
>> 389-adminutil-1.1.13-1.el5
>> 389-admin-1.1.14-1.el5
>> 389-admin-console-1.1.5-1.el5
>> 389-dsgw-1.1.6-1.el5
>> 389-admin-console-doc-1.1.5-1.el5
>> 389-adminutil-devel-1.1.13-1.el5
>> 389-console-1.1.4-1.el5
>> 389-ds-base-1.2.8-0.2.a2.el5
>>
>> Has anyone found a workaround?

> If you are referring to
> https://bugzilla.redhat.com/show_bug.cgi?id=661116

Alas, I cannot view that bug - "You are not authorized to access bug
#661116."
>
> You get an error, but you should be able to just ignore the error and
> proceed anyway.

Maybe not the same issue then? I definitely can't proceed to where I
need to go (SSL configuration) - the page is completely blank.
Navigating to the sub-items (Data, Replication, Schema, etc.) works though.
>
> There is a fix in updates testing which should be hitting the mirrors
> today or tomorrow.

I'll certainly give it a try... thanks!

--
Roy McMorran
Systems Administrator
MDI Biological Laboratory
mcmorran@mdibl.org


--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users

On 02/24/2011 09:50 AM, Roy McMorran wrote:
> On 2/24/11 11:35 AM, Rich Megginson wrote:
>> On 02/24/2011 09:09 AM, Roy McMorran wrote:
>>> <snip>
>>>
>>> I'm curious if there has been any update on this issue. I'm seeing
>>> the exact
>>> same behavior on a new install and it's preventing me from getting SSL
>>> configured. I can't get to that configuration tab without getting
>>> the Java
>>> NPE and the login prompt. Re-logging in doesn't help, and it matters
>>> not
>>> whether I use directory manager or admin.
>>>
>>> I'm on slightly newer versions:
>>> 389-ds-console-1.2.3-1.el5
>>> 389-ds-base-devel-1.2.8-0.2.a2.el5
>>> 389-ds-1.2.1-1.el5
>>> 389-adminutil-1.1.13-1.el5
>>> 389-admin-1.1.14-1.el5
>>> 389-admin-console-1.1.5-1.el5
>>> 389-dsgw-1.1.6-1.el5
>>> 389-admin-console-doc-1.1.5-1.el5
>>> 389-adminutil-devel-1.1.13-1.el5
>>> 389-console-1.1.4-1.el5
>>> 389-ds-base-1.2.8-0.2.a2.el5
>>>
>>> Has anyone found a workaround?
>> If you are referring to
>> https://bugzilla.redhat.com/show_bug.cgi?id=661116
> Alas, I cannot view that bug - "You are not authorized to access bug
> #661116."
Try it now.
>> You get an error, but you should be able to just ignore the error and
>> proceed anyway.
> Maybe not the same issue then? I definitely can't proceed to where I
> need to go (SSL configuration) - the page is completely blank.
> Navigating to the sub-items (Data, Replication, Schema, etc.) works though.
Hmm - ok.
>> There is a fix in updates testing which should be hitting the mirrors
>> today or tomorrow.
> I'll certainly give it a try... thanks!


--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users

On 2/24/11 11:54 AM, Rich Megginson wrote:
On
02/24/2011 09:50 AM, Roy McMorran wrote:


On 2/24/11 11:35 AM, Rich Megginson wrote:


On 02/24/2011 09:09 AM, Roy McMorran
wrote:


<snip>




I'm curious if there has been any update on this issue.* I'm
seeing


the exact


same behavior on a new install and it's preventing me from
getting SSL


configured.* I can't get to that configuration tab without
getting


the Java


NPE and the login prompt.* Re-logging in doesn't help, and
it matters


not


whether I use directory manager or admin.




I'm on slightly newer versions:


389-ds-console-1.2.3-1.el5


389-ds-base-devel-1.2.8-0.2.a2.el5


389-ds-1.2.1-1.el5


389-adminutil-1.1.13-1.el5


389-admin-1.1.14-1.el5


389-admin-console-1.1.5-1.el5


389-dsgw-1.1.6-1.el5


389-admin-console-doc-1.1.5-1.el5


389-adminutil-devel-1.1.13-1.el5


389-console-1.1.4-1.el5


389-ds-base-1.2.8-0.2.a2.el5




Has anyone found a workaround?



If you are referring to


https://bugzilla.redhat.com/show_bug.cgi?id=661116



Alas, I cannot view that bug - "You are not authorized to access
bug


#661116."



Try it now.





Better!



That sure looks like my NPE.





You get an error, but you should be able
to just ignore the error and


proceed anyway.



Maybe not the same issue then?* I definitely can't proceed to
where I


need to go (SSL configuration) - the page is completely blank.


Navigating to the sub-items (Data, Replication, Schema, etc.)
works though.






Hmm -
ok.





It's basically the same behavior that Robert Viduya reported in the
bug and in this very thread.* I'm hopeful :-)



Thanks Rich.






There is a fix in updates testing which
should be hitting the mirrors


today or tomorrow.



I'll certainly give it a try... thanks!








--
Roy McMorran
Systems Administrator
MDI Biological Laboratory
mcmorran@mdibl.org




--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users