You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@directory.apache.org by "Stéphane Démaret (JIRA)" <ji...@apache.org> on 2012/11/10 11:05:14 UTC
[jira] [Created] (DIRSERVER-1761) Unable to use external keystore
for SSL
Stéphane Démaret created DIRSERVER-1761:
-------------------------------------------
Summary: Unable to use external keystore for SSL
Key: DIRSERVER-1761
URL: https://issues.apache.org/jira/browse/DIRSERVER-1761
Project: Directory ApacheDS
Issue Type: Bug
Components: ldap
Affects Versions: 2.0.0-M8
Environment: - Microsoft Windows XP Professionnal Version 2002 SP3
- java version "1.6.0_32"
- Java(TM) SE Runtime Environment (build 1.6.0_32-b05)
- Java HotSpot(TM) Client VM (build 20.7-b02, mixed mode, sharing)
Reporter: Stéphane Démaret
Priority: Critical
Fix For: 2.0.0-M9
When I try to add the following attributs :
- ads-ldapServerKeystoreFile
- ads-ldapservercertificatepassword
to :
-ads-serverId=ldapServer,ou=servers,ads-directoryServiceId=default,ou=config
I get this kind of exception :
[2012-11-09 15:21:48] WARN [org.apache.directory.shared.ldap.model.entry.DefaultEntry] - The attribute 'ads-ldapservercertificatepassword' cannot be stored
[2012-11-09 15:21:48] ERROR [org.apache.directory.server.wrapper.ApacheDsTanukiWrapper] - Failed to start the service.
org.apache.directory.shared.ldap.model.exception.LdapOtherException: ERR_04269 ATTRIBUTE_TYPE for OID ads-ldapservercertificatepassword does not exist!
at org.apache.directory.server.core.api.partition.AbstractPartition.initialize(AbstractPartition.java:77)
at org.apache.directory.server.ApacheDsService.initConfigPartition(ApacheDsService.java:284)
at org.apache.directory.server.ApacheDsService.start(ApacheDsService.java:166)
at org.apache.directory.server.wrapper.ApacheDsTanukiWrapper.start(ApacheDsTanukiWrapper.java:72)
at org.tanukisoftware.wrapper.WrapperManager$12.run(WrapperManager.java:2788)
Caused by: org.apache.directory.shared.ldap.model.exception.LdapNoSuchAttributeException: ERR_04269 ATTRIBUTE_TYPE for OID ads-ldapservercertificatepassword does not exist!
at org.apache.directory.shared.ldap.model.schema.registries.DefaultAttributeTypeRegistry.lookup(DefaultAttributeTypeRegistry.java:317)
at org.apache.directory.shared.ldap.model.schema.registries.DefaultAttributeTypeRegistry.lookup(DefaultAttributeTypeRegistry.java:47)
at org.apache.directory.shared.ldap.schemamanager.impl.DefaultSchemaManager.lookupAttributeTypeRegistry(DefaultSchemaManager.java:1623)
at org.apache.directory.shared.ldap.model.entry.DefaultEntry.<init>(DefaultEntry.java:310)
at org.apache.directory.server.core.partition.ldif.SingleFileLdifPartition.loadEntries(SingleFileLdifPartition.java:163)
at org.apache.directory.server.core.partition.ldif.SingleFileLdifPartition.doInit(SingleFileLdifPartition.java:123)
at org.apache.directory.server.core.api.partition.AbstractPartition.initialize(AbstractPartition.java:72)
... 4 more
Caused by: org.apache.directory.shared.ldap.model.exception.LdapException: ERR_04269 ATTRIBUTE_TYPE for OID ads-ldapservercertificatepassword does not exist!
at org.apache.directory.shared.ldap.model.schema.registries.DefaultSchemaObjectRegistry.lookup(DefaultSchemaObjectRegistry.java:176)
at org.apache.directory.shared.ldap.model.schema.registries.DefaultAttributeTypeRegistry.lookup(DefaultAttributeTypeRegistry.java:313)
... 10 more
However it works fine in the apache directory studio with a previous version of the apache directory.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (DIRSERVER-1761) Unable to use external keystore
for SSL
Posted by "Emmanuel Lecharny (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DIRSERVER-1761?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13494703#comment-13494703 ]
Emmanuel Lecharny commented on DIRSERVER-1761:
----------------------------------------------
try with :
ads-keystoreFile
ads-certificatePassword
> Unable to use external keystore for SSL
> ---------------------------------------
>
> Key: DIRSERVER-1761
> URL: https://issues.apache.org/jira/browse/DIRSERVER-1761
> Project: Directory ApacheDS
> Issue Type: Bug
> Components: ldap
> Affects Versions: 2.0.0-M8
> Environment: - Microsoft Windows XP Professionnal Version 2002 SP3
> - java version "1.6.0_32"
> - Java(TM) SE Runtime Environment (build 1.6.0_32-b05)
> - Java HotSpot(TM) Client VM (build 20.7-b02, mixed mode, sharing)
> Reporter: Stéphane Démaret
> Priority: Critical
> Labels: security
> Fix For: 2.0.0-M9
>
>
> When I try to add the following attributs :
> - ads-ldapServerKeystoreFile
> - ads-ldapservercertificatepassword
> to :
> -ads-serverId=ldapServer,ou=servers,ads-directoryServiceId=default,ou=config
> I get this kind of exception :
> [2012-11-09 15:21:48] WARN [org.apache.directory.shared.ldap.model.entry.DefaultEntry] - The attribute 'ads-ldapservercertificatepassword' cannot be stored
> [2012-11-09 15:21:48] ERROR [org.apache.directory.server.wrapper.ApacheDsTanukiWrapper] - Failed to start the service.
> org.apache.directory.shared.ldap.model.exception.LdapOtherException: ERR_04269 ATTRIBUTE_TYPE for OID ads-ldapservercertificatepassword does not exist!
> at org.apache.directory.server.core.api.partition.AbstractPartition.initialize(AbstractPartition.java:77)
> at org.apache.directory.server.ApacheDsService.initConfigPartition(ApacheDsService.java:284)
> at org.apache.directory.server.ApacheDsService.start(ApacheDsService.java:166)
> at org.apache.directory.server.wrapper.ApacheDsTanukiWrapper.start(ApacheDsTanukiWrapper.java:72)
> at org.tanukisoftware.wrapper.WrapperManager$12.run(WrapperManager.java:2788)
> Caused by: org.apache.directory.shared.ldap.model.exception.LdapNoSuchAttributeException: ERR_04269 ATTRIBUTE_TYPE for OID ads-ldapservercertificatepassword does not exist!
> at org.apache.directory.shared.ldap.model.schema.registries.DefaultAttributeTypeRegistry.lookup(DefaultAttributeTypeRegistry.java:317)
> at org.apache.directory.shared.ldap.model.schema.registries.DefaultAttributeTypeRegistry.lookup(DefaultAttributeTypeRegistry.java:47)
> at org.apache.directory.shared.ldap.schemamanager.impl.DefaultSchemaManager.lookupAttributeTypeRegistry(DefaultSchemaManager.java:1623)
> at org.apache.directory.shared.ldap.model.entry.DefaultEntry.<init>(DefaultEntry.java:310)
> at org.apache.directory.server.core.partition.ldif.SingleFileLdifPartition.loadEntries(SingleFileLdifPartition.java:163)
> at org.apache.directory.server.core.partition.ldif.SingleFileLdifPartition.doInit(SingleFileLdifPartition.java:123)
> at org.apache.directory.server.core.api.partition.AbstractPartition.initialize(AbstractPartition.java:72)
> ... 4 more
> Caused by: org.apache.directory.shared.ldap.model.exception.LdapException: ERR_04269 ATTRIBUTE_TYPE for OID ads-ldapservercertificatepassword does not exist!
> at org.apache.directory.shared.ldap.model.schema.registries.DefaultSchemaObjectRegistry.lookup(DefaultSchemaObjectRegistry.java:176)
> at org.apache.directory.shared.ldap.model.schema.registries.DefaultAttributeTypeRegistry.lookup(DefaultAttributeTypeRegistry.java:313)
> ... 10 more
> However it works fine in the apache directory studio with a previous version of the apache directory.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (DIRSERVER-1761) Unable to use external keystore
for SSL
Posted by "Stéphane Démaret (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/DIRSERVER-1761?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13494719#comment-13494719 ]
Stéphane Démaret commented on DIRSERVER-1761:
---------------------------------------------
Problem fixed.
But I had to use the same password for the keystore and the key. Could you confirm that keystore password and password for the key must be the same?
Merci Emmanuel
> Unable to use external keystore for SSL
> ---------------------------------------
>
> Key: DIRSERVER-1761
> URL: https://issues.apache.org/jira/browse/DIRSERVER-1761
> Project: Directory ApacheDS
> Issue Type: Bug
> Components: ldap
> Affects Versions: 2.0.0-M8
> Environment: - Microsoft Windows XP Professionnal Version 2002 SP3
> - java version "1.6.0_32"
> - Java(TM) SE Runtime Environment (build 1.6.0_32-b05)
> - Java HotSpot(TM) Client VM (build 20.7-b02, mixed mode, sharing)
> Reporter: Stéphane Démaret
> Priority: Critical
> Labels: security
> Fix For: 2.0.0-M9
>
>
> When I try to add the following attributs :
> - ads-ldapServerKeystoreFile
> - ads-ldapservercertificatepassword
> to :
> -ads-serverId=ldapServer,ou=servers,ads-directoryServiceId=default,ou=config
> I get this kind of exception :
> [2012-11-09 15:21:48] WARN [org.apache.directory.shared.ldap.model.entry.DefaultEntry] - The attribute 'ads-ldapservercertificatepassword' cannot be stored
> [2012-11-09 15:21:48] ERROR [org.apache.directory.server.wrapper.ApacheDsTanukiWrapper] - Failed to start the service.
> org.apache.directory.shared.ldap.model.exception.LdapOtherException: ERR_04269 ATTRIBUTE_TYPE for OID ads-ldapservercertificatepassword does not exist!
> at org.apache.directory.server.core.api.partition.AbstractPartition.initialize(AbstractPartition.java:77)
> at org.apache.directory.server.ApacheDsService.initConfigPartition(ApacheDsService.java:284)
> at org.apache.directory.server.ApacheDsService.start(ApacheDsService.java:166)
> at org.apache.directory.server.wrapper.ApacheDsTanukiWrapper.start(ApacheDsTanukiWrapper.java:72)
> at org.tanukisoftware.wrapper.WrapperManager$12.run(WrapperManager.java:2788)
> Caused by: org.apache.directory.shared.ldap.model.exception.LdapNoSuchAttributeException: ERR_04269 ATTRIBUTE_TYPE for OID ads-ldapservercertificatepassword does not exist!
> at org.apache.directory.shared.ldap.model.schema.registries.DefaultAttributeTypeRegistry.lookup(DefaultAttributeTypeRegistry.java:317)
> at org.apache.directory.shared.ldap.model.schema.registries.DefaultAttributeTypeRegistry.lookup(DefaultAttributeTypeRegistry.java:47)
> at org.apache.directory.shared.ldap.schemamanager.impl.DefaultSchemaManager.lookupAttributeTypeRegistry(DefaultSchemaManager.java:1623)
> at org.apache.directory.shared.ldap.model.entry.DefaultEntry.<init>(DefaultEntry.java:310)
> at org.apache.directory.server.core.partition.ldif.SingleFileLdifPartition.loadEntries(SingleFileLdifPartition.java:163)
> at org.apache.directory.server.core.partition.ldif.SingleFileLdifPartition.doInit(SingleFileLdifPartition.java:123)
> at org.apache.directory.server.core.api.partition.AbstractPartition.initialize(AbstractPartition.java:72)
> ... 4 more
> Caused by: org.apache.directory.shared.ldap.model.exception.LdapException: ERR_04269 ATTRIBUTE_TYPE for OID ads-ldapservercertificatepassword does not exist!
> at org.apache.directory.shared.ldap.model.schema.registries.DefaultSchemaObjectRegistry.lookup(DefaultSchemaObjectRegistry.java:176)
> at org.apache.directory.shared.ldap.model.schema.registries.DefaultAttributeTypeRegistry.lookup(DefaultAttributeTypeRegistry.java:313)
> ... 10 more
> However it works fine in the apache directory studio with a previous version of the apache directory.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira