• Post Reply Bookmark Topic Watch Topic
  • New Topic
programming forums Java Mobile Certification Databases Caching Books Engineering Micro Controllers OS Languages Paradigms IDEs Build Tools Frameworks Application Servers Open Source This Site Careers Other Pie Elite all forums
this forum made possible by our volunteer staff, including ...
  • Campbell Ritchie
  • Jeanne Boyarsky
  • Ron McLeod
  • Paul Clapham
  • Liutauras Vilda
  • paul wheaton
  • Rob Spoor
  • Devaka Cooray
Saloon Keepers:
  • Stephan van Hulst
  • Tim Holloway
  • Carey Brown
  • Frits Walraven
  • Tim Moores
  • Mikalai Zaikin

iplanet setup question: failing to reach config dir server

Posts: 12
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
It is very thankful someone can kindly provide insight into following questions
At installation of directory server which is part of installation of
iplanet app server, l need to assign id / password to following

* Administrator for the Configuration Directory Server (default is
* Administrator for the Directory Server directory data, this
"superuser" is
identified by the Directory Manager Distinguished Name (DN) (default is
"cn=Directory Manager / DManager").
The Configuration Directory Server is the part of the Directory Server
used to store configuration information. The Directory Server also
stores directory data.
What is the difference between these 2 accounts ? It seems that both are
administrator account . But config dir server seems part of the dir
server. The DN seems an entry in dir server and what is the purpose of
first account (admin of config dir server)

2) when l tried to kick off iplanet admin server as follows, l got
following errors

iplanet@node0 /d99/iplanet/ias6> start-admin
admin40_check_ds_availability_init(): WARNING: Configuration Directory
Server is down or unreachable (Can't contact LDAP server)
Info: Cache expiration set to 600 seconds
Warning! admin40_task_eval_init(): unable to set User/Group baseDN
iPlanet-WebServer-Enterprise/4.1SP3 BB1-09/17/2000 01:08
startup: listening to http://xyz.mycompany.com
<http://xyz.mycompany.com>; , port 28498 as iplanet

Although, it is warned that the configuration LDAP server seemed down.
But l could find the LDAP server using "ps" command and l checked the
log file for LDAP service, it seemed ok.
iplanet@node0 /d99/iplanet/ias6> ps -ef | grep
iplanet 9519 9450 0 14:45:48 pts/2 0:00 grep slapd
iplanet 9376 1 0 13:02:39 ? 0:01 ./ns-slapd -D
/d99/iplanet/ias6/slapd-xyz -i /d99/iplanet/ias6/slapd-web
Log file content:

[14/Nov/2002:13:02:39 +0800] - iPlanet-Directory/5.0 ServicePack 1
5 starting up
[14/Nov/2002:13:02:40 +0800] - slapd started. Listening on all
interfaces port
389 for LDAP requests
Any idea about the failure to reach the configuration dir server ???
many thanks !
High Plains Drifter
Posts: 7289
Netbeans IDE VI Editor
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
Hi fox -
Most iPlanet products follow the convention of providing two or more administrator roles. In this case, the "meta-administrator" is designed to handle any number of directory server instances from a single console. This role may start, stop, and back up the server instances, or possibly link them to related services, such as a Meta-Directory Server, an Access Router (called iDAR), or even an access management program. This last example is what Sun ONE calls an Identity Server; it's just a directory server dedicated to supporting access management features like cross-domain single sign-on (CDSSO) and web application registries.
Your directory administrator, on the other hand, is concerned with managing the DITs (Directory Information Trees) and schema for one or more of the database instances supported by those servers. Managing LDAP information is a specialized skill in its own right.
This relationship is similar to an application or portal server, where one role is dedicated to maintaining the health and property settings of the server, and another maintains the integrity of the data it stores and manipulates.
The error below looks like you did not set up a proper administration account. Unfortunately, also like a lot of other iPlanet products, the directory server tends to spread your install parameters over several files, so sometimes problems like this are easier to solve by re-installing. Either that or dig through your Install/Admin guide, learn what each file contains and then check the starting parameters.
I can't remember off the top of my head the file that stores the base DN (Distinguished Name), but the DN is the address of the root context for any one LDAP database instance. You kinda need that to find your data.
Willie Smits can speak 40 languages. This tiny ad can speak only one:
a bit of art, as a gift, the permaculture playing cards
    Bookmark Topic Watch Topic
  • New Topic