英文:
OpenDJ Administration Port (4444) not able to authenticate Default User(Directory Manager) /any user
问题
亲爱的，
您能就以下情况给我一些建议吗？在将JVM更改为OpenJDK后，我在OpenDJ DS中遇到了问题，似乎Java中的trusted store中已删除了admin-certs。请您指导我们如何在OpenDJ中重新创建admin连接器/证书，而无需重新安装。
config.ldif
dn: cn=Administration Connector,cn=config
objectClass: top
objectClass: ds-cfg-administration-connector
ds-cfg-trust-manager-provider: cn=Administration,cn=Trust Manager Providers,cn=config
cn: Administration Connector
ds-cfg-key-manager-provider: cn=Administration,cn=Key Manager Providers,cn=config
ds-cfg-listen-address: 0.0.0.0
ds-cfg-listen-port: 4444
ds-cfg-ssl-cert-nickname: admin-cert
即使我输入了正确的密码也出现了错误：
./dsconfig -v
>>>> 指定 OpenDJ LDAP 连接参数
目录服务器主机名或 IP 地址 [XXXX.XXX.XX]：
目录服务器管理端口号 [4444]：
管理员用户绑定 DN [cn=Directory Manager]：
用户 'cn=Directory Manager' 的密码：
无法连接到 XXXX.XXX.XX 上的端口 4444 的服务器。
请检查此端口是否为管理端口。
端口状态：
lsof -nPi :4444
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
java 14530 ldap 87u IPv6 4618018 0t0 TCP *:4444 (LISTEN)
英文:
Dears,
Could you advise me on below situation, am having an issue with OpenDJ DS after change JVM to OpenJDK
seems like the admin-certs has been removed from trusted store in Java
could you advise how we can recreate admin connector/certs in OpenDJ without re installing
config.ldif
dn: cn=Administration Connector,cn=config
objectClass: top
objectClass: ds-cfg-administration-connector
ds-cfg-trust-manager-provider: cn=Administration,cn=Trust Manager Providers,cn=config
cn: Administration Connector
ds-cfg-key-manager-provider: cn=Administration,cn=Key Manager Providers,cn=config
ds-cfg-listen-address: 0.0.0.0
ds-cfg-listen-port: 4444
ds-cfg-ssl-cert-nickname: admin-cert
Error even i put correct password
./dsconfig -v
>>>> Specify OpenDJ LDAP connection parameters
Directory server hostname or IP address [XXXX.XXX.XX]:
Directory server administration port number [4444]:
Administrator user bind DN [cn=Directory Manager]:
Password for user 'cn=Directory Manager':
Unable to connect to the server at XXXX.XXX.XX on port 4444.
Check this port is an administration port
Port status
lsof -nPi :4444
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
java 14530 ldap 87u IPv6 4618018 0t0 TCP *:4444 (LISTEN)
答案1
得分: 1
- 禁用 IPv6（不确定是否是原因）
- 在 Java（conf/java.security）中注释掉 jdk.tls.disabledAlgorithms
英文:
I was having the same issue:
2 things to resolve:
- disable ipv6( not sure was this the reason)
- on java (conf/java.security) comment out the jdk.tls.disabledAlgorithms
答案2
得分: 0
A change in JavaVM shouldn't affect the admin truststore which is located under the opends folder.
我建议您尝试使用Java SSL调试标志，以获得更具体的错误消息，这将帮助您了解问题出在哪里（详细信息请参见 https://ludopoitou.com/2011/06/29/opendj-troubleshooting-ldap-ssl-connections/）。
英文:
A change in JavaVM shouldn't affect the admin truststore which is located under the opends folder.
I would suggest that you try to use the Java SSL debugging flag to obtain a more specific error message that will help you understand where the issue lies (for details see https://ludopoitou.com/2011/06/29/opendj-troubleshooting-ldap-ssl-connections/).
通过集体智慧和协作来改善编程学习和解决问题的方式。致力于成为全球开发者共同参与的知识库，让每个人都能够通过互相帮助和分享经验来进步。
评论